Product Principal Penetration Tester

Hitachi Energy Cybersecurity Assurance Center is a product security team performing penetration testing of all products including hardware, software, cloud, mobile, and OT solutions.

• In-depth knowledge of TCP/IP networking and application protocols concepts
• Understanding of software exploitation and common vulnerabilities
• Knowledge of port scanning, vulnerability assessment, and fuzzing tools
• Knowledge of protocols associated with web technologies
• Understanding of OWASP Top 10 and SANS 25 vulnerabilities and their mitigations
• Knowledge about security testing of mobile apps and related APIs
• Experience in multicultural environments
• Good English communication skills (verbal and technical writing)
• Knowledge of control communication protocols and technologies
• Proficiency in one scripting language (e.g., Python)
• Knowledge of cryptographic and security protocols
• Experience with penetration testing tools such as Metasploit; able to write auxiliary modules and code exploits
• Hands-on experience with reverse engineering and binary analysis is a plus
• Experience with hardware exploitation techniques including firmware extraction, UART, JTAG, I2C interfacing is a plus
• Understanding of RF, Bluetooth, NFC, and wireless attack surfaces is a plus

• Perform penetration tests on a wide range of products including hardware, software, cloud, mobile, and OT solutions
• Identify and exploit vulnerabilities in products prior to release
• Work closely with engineers to support security-by-design
• Use and develop state-of-the-art security tools, including custom tools for cryptography and LLM-supported reverse engineering
• Participate in technical meetings and knowledge exchange sessions
• Create reports and internal documentation