Specialist - Cybersecurity Penetration Tester

You join the Technology & Innovation department in Governance, and more specifically, the Cybersecurity Global Security Lab team (about ~50 people) spread across 4 countries of France, USA, India & China. This team has a mandate to do Penetration tests of all offers of SE, which means you get a chance to work on multiple technologies, domains in cybersecurity. This role is very critical for the company and the penetration test results impact the Sell stage gate of Schneider Electric products.

Job Description

• Perform pentesting across embedded, web and thick client applications.
• Identify vulnerabilities using advanced tools and research-driven techniques.
• Conduct reverse engineering and dynamic analysis.
• Assess security controls including - Secure Boot, Trusted Execution Environments (TEE), Firmware Update and Cryptographic Implementations
• Deliver clear reports, PoCs and stakeholder communication.
• Drive security awareness and advisory for product teams. Who Are We The Schneider Electric Global Security Lab (GSL) performs testing to ensure that we deliver more secure products to our customers. Our Global Security Labs in Grenoble, France; Shanghai, China; Andover USA and Bangalore, India provide Penetration Testing services. Schneider Electric’s Global Security Lab is accredited by CREST for pen-test.

Required Skills

• 4+ years of experience in penetration testing, vulnerability research, exploit development or embedded security assessments
• Strong expertise with tools: Burp, Nmap, Wireshark, OWASP ZAP, Kali.
• Experience in reverse engineering and exploit development.
• Knowledge of low-level vulnerabilities (memory corruption, UAF, race conditions).
• Knowledge of Windows and Linux OS along with strong understanding of networking principles.
• Experience using AddressSanitizer (ASAN), UndefinedBehaviorSanitizer (UBSAN), Valgrind and GDB
• Solid knowledge of network protocols, application security and cloud environments.
• Knowledge in testing mobile applications (Android and iOS) is not mandatory but good to have.

Qualifications

• Certifications: OSED / OSEE / GXPN / GREM / CARTE /OSCP/
• Programming: C, C++, Java, .NET
• Strong communication and adaptability

Looking to make an IMPACT with your career? When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values – Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork – starts with us. IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world. We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one. Become an IMPACT Maker with Schneider Electric – apply today! €40 billion global revenue +9% organic growth 150 000+ employees in 100+ countries You must submit an online application to be considered for any position with us. This position will be posted until filled. Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and ‘inclusion’ is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do. At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.