Security Researcher (Penetration Testing / Product Security)

Our Client is an established global technology leader driving the digital transformation and innovation required to accelerate the transition toward a carbon-neutral future. Serving customers across the utility, industry, and infrastructure sectors, they provide cutting-edge solutions and services across the entire energy value chain. The company operates on a massive global scale with a proven track record and an unparalleled installed technological base spanning well over 100 countries.

• Strong understanding of TCP/IP networking and application protocols
• Solid knowledge of software exploitation techniques and common vulnerabilities
• Hands-on experience with port scanning, fuzzing, and vulnerability assessment tools
• Knowledge of web technologies and related security risks
• Familiarity with OWASP Top 10 and SANS Top 25
• Experience with mobile application security and APIs
• Proficiency in at least one scripting language (e.g. Python)
• Good knowledge of cryptographic and security protocols
• Experience using tools like Metasploit and writing custom exploits
• Strong English communication skills (written and spoken)

Nice to have:

• Experience with reverse engineering and binary analysis
• Knowledge of hardware exploitation (UART, JTAG, I2C, firmware extraction)
• Understanding of wireless technologies (RF, Bluetooth, NFC)

• Perform penetration testing across hardware, software, cloud, mobile, and OT environments
• Identify, analyze, and exploit vulnerabilities to prevent security issues before release
• Collaborate closely with engineering teams to support a security-by-design approach
• Use and develop advanced security tools, including custom cryptographic and reverse engineering solutions
• Conduct research on emerging technologies, protocols, and potential attack vectors
• Prepare detailed technical reports and documentation
• Participate in knowledge-sharing sessions and technical discussions