Security Test Engineer

Expected, Python

Optional, Wireshark

About the project, Team responsible for strengthening the security of industrial automation products and systems; development and execution of a comprehensive product security validation program to ensure resilience of products against cybersecurity threats.

This is how we work, at the client's site, you focus on product development

Your responsibilities, Execute white-box and black-box security testing as part of a structured product security validation program., Perform security assessments of industrial products and systems, including firmware, communication protocols, and device interfaces., Conduct protocol-level testing and validate industrial communication mechanisms., Analyze firmware and software binaries to identify security weaknesses, including reverse engineering activities when required., Design and execute fuzz testing and negative testing scenarios targeting device interfaces and communication protocols., Identify, validate, and document security vulnerabilities, including the creation of proof-of-concept (PoC) exploits when appropriate., Perform basic hardware-level security validation, including analysis of debug interfaces and physical access scenarios., Analyze test results, triage findings, and support root cause analysis together with development teams., Contribute to the development and maintenance of automated security testing frameworks and scripts, primarily in Python., Research emerging vulnerabilities, attack techniques, and threat trends relevant to industrial products and environments.

Bachelor’s degree in Computer Science or a related field., Hands-on experience with programming or scripting languages, preferably Python., Solid understanding of computer networking, including configuration and troubleshooting., Familiarity with software security testing methodologies, including fuzz testing, negative testing, and white-box/black-box testing., English communication skills min. B2

Optional, Experience with reverse engineering tools such as IDA Pro, Ghidra, or Radare2., Knowledge of industrial communication protocols, including Ethernet/IP and CIP., Experience testing embedded systems, firmware, or hardware devices., Knowledge of security testing tools such as Burp Suite and Wireshark.

This is how we work on a project, documentation, issue tracking tools, test automation

Benefits, sharing the costs of sports activities, private medical care, life insurance

Recruitment stages, Phone call with a Recruiter, Client interview (may require 2 rounds), Feedback and decision

KUBO, Our client is a global technology leader specializing in industrial automation, digital transformation, and smart manufacturing solutions.