Senior Penetration Tester (3-6 yrs)

The Role : Cybersecurity Penetration Tester R&D.

Job Description :

Overview :

- Lead engagements from kickoff with product owners through scoping engagements, penetration testing and reporting while adhering to the agreed scope and deadlines.

- Minimum 3+ years of experience in product penetration testing.

- 3+ years of experience in web, mobile (Both Android & iOS) and thick client penetration testing domains. (Recommended to have expertise in more than 1 domain).

- Perform exploit and vulnerability research on Schneider electric products.

- Knowledge of TCP/IP, OSI Layer, IPv4 & IPv6, Network Protocols and Wireless Communication skills preferred.

- Knowledge of at least one scripting language such as python, shell script, ruby, javascript etc.

- Research fuzz testing tools and conduct penetration test on a variety of Schneider Electric products via. communication interfaces such as Modbus, Wi-Fi, Bluetooth, and others.

- Ability to develop detailed PoCs, train product team and promote security awareness.

- Stay up to date on the latest exploits and security trends.

Requirements :

- Bachelor's Degree in a related Cybersecurity/IT/Computer Science field.

- OSCP, OSCE, SANS GPEN, GXPEN, CRTE, CPSA, CRT or CEH certified.

- Good understanding of emerging technologies such as IoT and 5G.

- Knowledge of programming languages such as C, C++, Java, .Net or Javascript.

- Ability to learn and adapt quickly.

- Knowledge of Windows and Linux, basic security, and networking principles.

- Knowledge of reverse engineering tools, debuggers, and dynamic analysis techniques.

- Knowledge of OWASP, NIST, MITRE CWE etc.

One or more of the following may serve as a distinct advantage (not strictly required) :

- Hardware debugging skills.

- Familiarity with testing embedded devices, OT/IoT protocols.

- Basic reverse engineering skills (Familiarity with IDA Free, Ghidra, etc.)

- Basics of ARM exploitation.

- Good in exploit writing.