Penetration Testing

Penetration Testing
Project
We are looking for a skilled Security Researcher to join a Cybersecurity Assurance Center, part of a product security team responsible for penetration testing across a wide range of products.
In this role, you will work on cutting-edge cybersecurity challenges, ensuring that products are secure before they reach the market.
– Perform penetration testing across hardware, software, cloud, mobile and OT environments
– Identify, analyze and exploit vulnerabilities to prevent security issues before release
– Collaborate closely with engineering teams to support a security-by-design approach
– Use and develop advanced security tools, including custom cryptographic and reverse engineering solutions
– Conduct research on emerging technologies, protocols and potential attack vectors
– Prepare detailed technical reports and documentation
– Participate in knowledge-sharing sessions and technical discussions
– Strong understanding of TCP/IP networking and application protocols
– Solid knowledge of software exploitation techniques and common vulnerabilities
– Hands-on experience with port scanning, fuzzing, and vulnerability assessment tools
– Knowledge of web technologies and related security risks
– Familiarity with OWASP Top 10 and SANS Top 25
– Experience with mobile application security and APIs
– Proficiency in at least one scripting language (e.g. Python)
– Good knowledge of cryptographic and security protocols
– Experience using tools like Metasploit and writing custom exploits
– Strong English communication skills (written and spoken)
– Experience with reverse engineering and binary analysis
– Knowledge of hardware exploitation (UART, JTAG, I2C, firmware extraction)
– Understanding of wireless technologies (RF, Bluetooth, NFC)
Responsibilities
– Perform penetration testing on various systems, including hardware, software, cloud, mobile, and OT environmentsIdentify, analyze, and exploit vulnerabilities to improve product security before release
– Collaborate with engineering teams to support secure development practices
– Conduct vulnerability assessments, fuzz testing, and port scanning
– Research new technologies, communication protocols, and associated security risks
– Prepare detailed technical reports and internal documentation
– Participate in knowledge-sharing and technical discussions
– Use and develop advanced security tools, including custom-built solutions
Client – why choose this particular client from the Jit portfolio?
Our Client is an established global technology leader driving the digital transformation and innovation required to accelerate the transition toward a carbon-neutral future. Serving customers across the utility, industry, and infrastructure sectors, they provide cutting-edge solutions and services across the entire energy value chain. The organization is actively evolving the worlds energy systems to make them more sustainable, flexible, and secure, while precisely balancing social, environmental, and economic value.
With a proven track record and an unparalleled installed technological base spanning well over 100 countries, the company operates on a massive global scale.