Product Security Engineer

About Our Client

Our client is a renowned name in the industrial automation space.

Job Description

• Develop test specifications, test cases, and test plans for security vulnerability testing of Festo products.
• Execute test cases effectively.
• Conduct basic vulnerability Assessment using tools like Nessus, OpenVAS and Nmap etc.
• Perform protocol-level black-box fuzzing tests using various open-source and proprietary tools.
• Support documentation of test results and collaborate with the development team.
• Participate in automating test processes within CI / CD environments.

Our Requirements

• Education : Bachelor's degree in engineering, Computer Science, Mechatronics, Information Science, Electronics, Cyber Security, or a related field.

The Successful Applicant

• Mandatory Experience :

o Minimum of 10 years of experience in device security testing, ideally within the Industrial Automation or Automotive sectors.

o Proficiency in programming languages such as C / C++, Python, or Shell scripting and hands on experience with CI / CD practices.

o Familiarity with different industrial protocols, fuzzing protocols, and PLC systems and hands on experience in the embedded domain.

o Understanding of the Secure Development Lifecycle and standards such as IEC 62443-4.

o Experience with tools like OpenVAS, Nessus, Nmap, Wireshark, and penetration testing for embedded or IoT systems.

o Hands on experience with various industrial protocols (, Profinet, EtherCAT, Ethernet / IP, Modbus, OPC / UA, TSN) and PLC systems (, Siemens, Rockwell, Yokogawa, Schneider Electric, Beckhoff, ABB, Omron), as well as automotive communication protocols (CAN, LIN, FlexRay).

o Relevant certifications are advantageous : OSCP, CRTP, CRTO, eWPTX, CPENT, LPT, PNPT.