Penetration Tester / Security Consultant – IoT, Edge & Cloud | IEC 62443

Project overview

For a technology group in the mechanical and plant engineering sector, we are looking for an experienced penetration tester with a consulting component.

The subject is the security assessment of the group-wide IoT platform. This includes the edge device, via which the majority of the machine park is connected remotely, and the associated central cloud services. Testing will be conducted using a white-box approach with prior knowledge, access, and test hardware, in close coordination with internal software architects. The project starts as a defined initial mandate. Follow-up projects for other products are highly probable.

Responsibilities

• Penetration tests of the IoT platform including edge device (white-box)
• Examination of central cloud/shared services for manipulation security and protection against takeover of machine networks at the end customer
• Evaluation of the chain of staging, certificate rollout in the field, and customer-specific application deployment
• Documentation of results including test report summary
• Technical support for product and software architects: threat analyses, risk assessment, building security understanding in a mechanical engineering-focused development organization

Requirements

Framework Data:

If the project fits your profile, I look forward to receiving your CV, desired hourly rate, and earliest availability.

• Several years of experience in penetration testing, ideally in the industrial or OT/IoT environment
• Sound knowledge of IEC 62443
• Experience with embedded/edge devices and cloud platforms
• Threat Modeling / Threat Analysis, Static Code Analysis, Vulnerability Management
• Consulting and communication skills towards developers and architects without a security background
• Fluent German
• Residence in Germany, willingness for occasional on-site appointments (Hesse)
• Start: December 2026 (Onboarding) or January 2027
• Volume: initially approx. 20 person-days
• Location: predominantly remote, occasionally on-site
• Language: German, English advantageous

Project details

• Start: 2026-12
• Duration: 1 Monat
• Remote: remote
• Location: Hessen, Deutschland, DE
• Languages: German