Required skills
- Penetration Testing
- IoT
- Edge Computing
- Cloud Security
- IEC 62443
- Threat Modeling
- Static Code Analysis
- Vulnerability Management
- Embedded Systems
- OT Security
- Consulting
- Communication
Languages: German
Job description
Seeking an experienced Penetration Tester with consulting experience for a technology group in the mechanical and plant engineering sector. The role involves security assessment of the group-wide IoT platform, including edge devices and cloud services.
Project overview
For a technology group in the mechanical and plant engineering sector, we are looking for an experienced penetration tester with a consulting component.
The subject is the security assessment of the group-wide IoT platform. This includes the edge device, via which the majority of the machine park is connected remotely, and the associated central cloud services. Testing will be conducted using a white-box approach with prior knowledge, access, and test hardware, in close coordination with internal software architects. The project starts as a defined initial mandate. Follow-up projects for other products are highly probable.
Responsibilities
- Penetration tests of the IoT platform including edge device (white-box)
- Examination of central cloud/shared services for manipulation security and protection against takeover of machine networks at the end customer
- Evaluation of the chain of staging, certificate rollout in the field, and customer-specific application deployment
- Documentation of results including test report summary
- Technical support for product and software architects: threat analyses, risk assessment, building security understanding in a mechanical engineering-focused development organization
Requirements
Framework Data:
If the project fits your profile, I look forward to receiving your CV, desired hourly rate, and earliest availability.
- Several years of experience in penetration testing, ideally in the industrial or OT/IoT environment
- Sound knowledge of IEC 62443
- Experience with embedded/edge devices and cloud platforms
- Threat Modeling / Threat Analysis, Static Code Analysis, Vulnerability Management
- Consulting and communication skills towards developers and architects without a security background
- Fluent German
- Residence in Germany, willingness for occasional on-site appointments (Hesse)
- Start: December 2026 (Onboarding) or January 2027
- Volume: initially approx. 20 person-days
- Location: predominantly remote, occasionally on-site
- Language: German, English advantageous
Project details
- Start: 2026-12
- Duration: 1 Monat
- Remote: remote
- Location: Hessen, Deutschland, DE
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap DE