Senior PenTester

Context

Within the Technology & Innovation department, in Governance, you will join the Cybersecurity Global Security Lab team, made up of around 50 people across France, the USA, India and China.

The Global Security Lab performs penetration testing on Schneider Electric offers to help deliver more secure products to our customers.

This role is critical for the company: penetration test results impact the Schneider Electric product Sell stage gate.

Location

This role is based in France, in Grenoble.

Your role

Within the Cybersecurity Global Security Lab team, you will act as a Senior Penetration Tester across multiple cybersecurity technologies and domains.

You will perform penetration testing on embedded, web and thick client applications, identify vulnerabilities using advanced tools and research-driven techniques, and clearly communicate your analysis to product stakeholders.

You will also contribute to security advisory and awareness for product teams to strengthen the security of Schneider Electric offers.

Your missions


* Perform penetration testing across embedded, web and thick client applications.


* Identify vulnerabilities using advanced tools and research-driven techniques.


* Conduct reverse engineering and dynamic analysis.


* Deliver clear reports, proofs of concept and stakeholder communication.


* Drive security awareness and advisory for product teams.


* Work across multiple technologies and cybersecurity domains within Schneider Electric offers.

Your profile


* You have 4+ years of experience in application and/or embedded penetration testing.


* You bring strong expertise with tools such as Burp, Nmap, Wireshark, OWASP ZAP and Kali.


* You have experience in reverse engineering and exploit development.


* You understand low-level vulnerabilities such as memory corruption, Use-After-Free and race conditions.


* You have knowledge of Windows and Linux operating systems and a strong understanding of networking


* principles.


* You are familiar with OWASP, NIST, MITRE CWE and CVSS.


* Knowledge of mobile application testing on Android and iOS would be a plus.

Your skills


* Solid knowledge of network protocols, application security and cloud environments.


* Preferred certifications: OSCP, OSEP, OSED, GPEN or GXPN.


* Programming skills: C, C++, Java, .NET.


* Strong communication and adaptability.


* Ability to work in an international and multicultural environment.


* Ability to turn technical findings into clear and actionable deliverables for stakeholders.

We offer

Our offer includes an attractive package and goes well beyond :

Join us in electrifying the future! At Schneider Electric, innovation is sustainable - and so are careers.

Here, your job has purpose, and so does your everyday impact.


* The world's most sustainable company according to leading rankings: every solution we deliver helps reduce our customers' carbon foot...