Engineer II, Senior Penetration Tester

You join the Technology & Innovation department in Governance, and more specifically, the Cybersecurity Global Security Lab team (about ~50 people) spread across 4 countries of France, USA, India & China.

This team has a mandate to do Penetration tests of all offers of SE, which means you get a chance to work on multiple technologies, domains in cybersecurity.

This role is very critical for the company and the penetration test results impact the Sell stage gate of Schneider Electric products.

Job Description


* Perform pentesting across embedded, web and thick client applications.


* Identify vulnerabilities using advanced tools and research-driven techniques.


* Conduct reverse engineering and dynamic analysis.


* Assess security controls including - Secure Boot, Trusted Execution Environments (TEE), Firmware Update and Cryptographic Implementations


* Deliver clear reports, PoCs and stakeholder communication.


* Drive security awareness and advisory for product teams.

Who Are We

The Schneider Electric Global Security Lab (GSL) performs testing to ensure that we deliver more secure products to our customers.

Our Global Security Labs in Grenoble, France; Shanghai, China; Andover USA and Bangalore, India provide Penetration Testing services.

Schneider Electric's Global Security Lab is accredited by CREST for pen-test.

Required Skills


* 4+ years of experience in penetration testing, vulnerability research, exploit development or embedded security assessments


* Strong expertise with tools: Burp, Nmap, Wireshark, OWASP ZAP, Kali.


* Experience in reverse engineering and exploit development.


* Knowledge of low-level vulnerabilities (memory corruption, UAF, race conditions).


* Knowledge of Windows and Linux OS along with strong understanding of networking principles.


* Experience using AddressSanitizer (ASAN), UndefinedBehaviorSanitizer (UBSAN), Valgrind and GDB


* Solid knowledge of network protocols, application security and cloud environments.


* Knowledge in testing mobile applications (Android and iOS) is not mandatory but good to have.

Qualifications


* Certifications: OSED / OSEE / GXPN / GREM / CARTE /OSCP/


* Programming: C, C++, Java, .NET


* Strong communication and adaptability

Bring your cybersecurity expertise to a team that's ready to invest in your growth - apply today!

Rewards designed for you

Our Total Rewards is our way of saying: We see you and we value you.

It's more than just pay and benefits-it's a meaningful investment in you.

It is designed to help you perform, grow, feel safe, and elevate your potential.

The package helps you care for yourself and your family, plan your future, grow your skills and career, collaborate in an inclusive workplace, and contribute to your community.

At Schneider Electric, we're here for what matters most to you.

Discover more at our Career Page.



* Country-specific programs and initiatives may be available.

Looking...