Security Test Engineer

Our client is a global technology leader specializing in industrial automation, digital transformation, and smart manufacturing solutions.

We are looking for a Security Test Engineer to join a team responsible for strengthening the security of industrial automation products and systems. In this role, you will contribute to the development and execution of a comprehensive product security validation program, helping ensure the resilience of products against evolving cybersecurity threats.

This position is ideal for a security-focused engineer who enjoys analyzing complex systems, uncovering vulnerabilities, and developing innovative testing approaches for embedded and industrial environments.

Responsibilities

• Bachelor’s degree in Computer Science or a related field.
• Hands-on experience with programming or scripting languages, preferably Python.
• Solid understanding of computer networking, including configuration and troubleshooting.
• Familiarity with software security testing methodologies, including fuzz testing, negative testing, and white-box/black-box testing.
• English communication skills min. B2

Nice to Have

• Experience with reverse engineering tools such as IDA Pro, Ghidra, or Radare2.
• Knowledge of industrial communication protocols, including Ethernet/IP and CIP.
• Experience testing embedded systems, firmware, or hardware devices.
• Knowledge of security testing tools such as Burp Suite and Wireshark.

Requirements

• Execute white-box and black-box security testing as part of a structured product security validation program.
• Perform security assessments of industrial products and systems, including firmware, communication protocols, and device interfaces.
• Conduct protocol-level testing and validate industrial communication mechanisms.
• Analyze firmware and software binaries to identify security weaknesses, including reverse engineering activities when required.
• Design and execute fuzz testing and negative testing scenarios targeting device interfaces and communication protocols.
• Identify, validate, and document security vulnerabilities, including the creation of proof-of-concept (PoC) exploits when appropriate.
• Perform basic hardware-level security validation, including analysis of debug interfaces and physical access scenarios.
• Analyze test results, triage findings, and support root cause analysis together with development teams.
• Contribute to the development and maintenance of automated security testing frameworks and scripts, primarily in Python.
• Research emerging vulnerabilities, attack techniques, and threat trends relevant to industrial products and environments.

Benefits

• Contract type: B2B
• Rate: 140-165 PLN net/hour
• Work model: Hybrid (3 days per week from the office in Katowice)
• Benefits: private medical care, life insurance, Multisport card