Cybersecurity Product Penetration Tester

Hitachi Energy Cybersecurity Assurance Center is a product security team that performs penetration testing on every product built by the company, including hardware, software, cloud, mobile, and OT solutions.

• In-depth knowledge of TCP/IP networking and application protocols concepts
• Understanding of software exploitation and common vulnerabilities
• Understanding of port scanning, vulnerability assessment, and fuzzing tools
• Knowledge of protocols associated with web technologies
• Understanding of OWASP Top 10 and SANS 25 vulnerabilities and their mitigations
• Knowledge about security testing of mobile apps and related APIs
• Experience working in multicultural environments
• Good English communication skills, both verbal and technical report writing
• Knowledge of control communication protocols and technologies
• Proficiency in one scripting language (e.g., Python)
• Knowledge of cryptographic and security protocols
• Understanding of penetration testing tools like Metasploit, including writing auxiliary modules and exploits
• Hands-on experience with reverse engineering and binary analysis is a plus
• Experience with hardware exploitation techniques including firmware extraction, UART, JTAG, I2C interfacing is a plus
• Understanding of RF, Bluetooth, NFC, and wireless attack surfaces is a plus

• Perform penetration tests on a wide range of systems including hardware, software, cloud, mobile, and OT solutions
• Gather information about industry technologies and new communication protocols and their weaknesses
• Prepare reports and develop internal team documentation
• Participate in technical meetings and knowledge exchange sessions
• Identify and exploit vulnerabilities across all Hitachi Energy products to eliminate them before market release
• Support implementation of security-by-design approach with engineering teams
• Use and develop state-of-the-art hardware and software tools, including custom tools for cryptography and reverse engineering