Specialist - Cybersecurity Penetration Tester

Job Summary

You join the Technology Innovation department in Governance, and more specifically, the Cybersecurity Global Security Lab team (about ~50 people) spread across 4 countries of France, USA, India China. This team has a mandate to do Penetration tests of all offers of SE, which means you get a chance to work on multiple technologies, domains in cybersecurity. This role is very critical for the company and the penetration test results impact the Sell stage gate of Schneider Electric products.

Responsibilities

• Perform pentesting across embedded, web and thick client applications.
• Identify vulnerabilities using advanced tools and research-driven techniques.
• Conduct reverse engineering and dynamic analysis.
• Assess security controls including Secure Boot, Trusted Execution Environments (TEE), Firmware Update and Cryptographic Implementations.
• Deliver clear reports, PoCs and stakeholder communication.
• Drive security awareness and advisory for product teams.

Required Skills

• 4+ years of experience in penetration testing, vulnerability research, exploit development or embedded security assessments
• Strong expertise with tools: Burp, Nmap, Wireshark, OWASP ZAP, Kali.
• Experience in reverse engineering and exploit development.
• Knowledge of low-level vulnerabilities (memory corruption, UAF, race conditions).
• Knowledge of Windows and Linux OS along with strong understanding of networking principles.
• Experience using AddressSanitizer (ASAN), UndefinedBehaviorSanitizer (UBSAN), Valgrind and GDB
• Solid knowledge of network protocols, application security and cloud environments.
• Knowledge in testing mobile applications (Android and iOS) is not mandatory but good to have.

Qualifications

• Certifications: OSED / OSEE / GXPN / GREM / CARTE /OSCP/
• Programming: C, C++, Java, .NET
• Strong communication and adaptability

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.