Security Test Engineer

Аналитика рынка

Стек

Откликнуться

Загрузите резюме — мы свяжем вас с работодателем напрямую через нашу базу.

Описание

Обязанности: Execute white-box and black-box security testing as part of a structured product security validation program., Perform security assessments of industrial products and systems, including firmware, communication protocols, and device interfaces., Conduct protocol-level testing and validate industrial communication mechanisms., Analyze firmware and software binaries to identify security weaknesses, including reverse engineering activities when required., Design and execute fuzz testing and negative testing scenarios targeting device interfaces and communication protocols., Identify, validate, and document security vulnerabilities, including the creation of proof-of-concept (PoC) exploits when appropriate., Perform basic hardware-level security validation, including analysis of debug interfaces and physical access scenarios., Analyze test results, triage findings, and support root cause analysis together with development teams., Contribute to the development and maintenance of automated security testing frameworks and scripts, primarily in Python., Research emerging vulnerabilities, attack techniques, and threat trends relevant to industrial products and environments. Опыт: Bachelor’s degree in Computer Science or a related field., Hands-on experience with programming or scripting languages, preferably Python., Solid understanding of computer networking, including configuration and troubleshooting., Familiarity with software security testing methodologies, including fuzz testing, negative testing, and white-box/black-box testing., English communication skills min. B2, Experience with reverse engineering tools such as IDA Pro, Ghidra, or Radare2., Knowledge of industrial communication protocols, including Ethernet/IP and CIP., Experience testing embedded systems, firmware, or hardware devices., Knowledge of security testing tools such as Burp Suite and Wireshark.

Контакты работодателя (email/phone/telegram) скрыты из публичного превью — отправьте резюме, чтобы мы связали вас напрямую.