https://www.linkedin.com/jobs/view/2624814336/?refId=52b42ef2-f7f3-4d4a-9cae-187f750e331d

Cyber Security Specialist / Penetration Tester

Resideo

Czechia, Europe

Main responsibilities: To keep our devices safe and to make them even safer providing Hardware testing, Firmware testing, Mobile application testing and Web application testing. Job Duties: Most of your worktime you will run, analyze and create penetration tests (manual & automated). You will discuss with developers and architects what vulnerabilities you have found, and you will suggest improvements. We use various penetration testing tools like Nessus, nmap, BurpSuite, Nikto, ZAP, you can also create your own tool. You also need to be strong in manual penetration testing; for example, you must be able to simulate a SQL injection without tools, simulate XSS attack, X-Path Injection, etc. Part of your job will be also programming (Python) and scripting (Bash) test cases. We will appreciate your help to lower level Product security assurance team members. You can help us to develop and define product security processes in the Product Security Assurance Group. You will be recognized as an emerging authority within the Product Security Assurance Group.You Must Have: Proven experience in mobile, web application and network penetration testing. Basic understanding of encryption standards and technologies. Demonstrated Knowledge of OWASP Top 10 and SANS Top 25 and how to effectively remediate vulnerabilities associated with each. Valid OSCP certificate or at least one non-XSS CVE reported.We Value: Knowledge on HVAC control systems, controllers, sensors etc. Basic knowledge of IoT and Hardware exploitation - OWASP IoT Top 10. Basic understanding of Fuzzing standards. Additional certifications such as OSCE, OSWE, CCSP, CCSK will be highly desirable. Strong software engineering skills. Knowledge of CI/CD environments.