Security Engineer-2

Role Overview: As a Security Engineer at our global climate technologies company, you will play a crucial role in helping to build and support the Copeland Product Security Program. This cross-functional position will involve working directly with product development teams by consulting on and testing security strategies. Key Responsibilities: - Perform product security testing and reporting, including but not limited to: - Black box reverse engineering of hardware and firmware - Vulnerability research - Exploit development - Fuzz testing - Protocol reverse engineering - Conduct manual penetration testing, including but not limited to: - Mobile Applications (iOS & Android) - Web Applications - Cloud Infrastructure - Network Systems - Facilitate threat modeling with Copeland application, infrastructure, and product teams. - Perform security training and outreach to internal development teams. - Perform security analysis & evaluation of ICS/OT environments related to product manufacturing. - Perform security analysis & evaluation of both hardware and software supply chains. - Maintain documentation and metrics for the product security programs services. Qualifications Required: - Minimum of 5 years of experience with any combination of the following: embedded systems and IoT security, red teaming, or penetration testing - Experience conducting security testing of embedded hardware and the ability to identify and manipulate debug interfaces (UART, JTAG, SWD, etc.) and peripheral buses (SPI, I2C, etc.) - Binary Reverse Engineering of ARM, MIPS, and PowerPC firmware using industry-standard tools such as IDA Pro, Binary Ninja, Ghidra, etc. - Experienced planning and executing Red Team exercises. - Experience in Fuzz Testing of industrial communication protocols like Wi-Fi / BLE / Wireless HART / PROFINET/ MODBUS / Ethernet IP/ OPC UA/ HART /FF - Understanding of secure libraries (e.g., bootloader, etc.) - Knowledge of embedded Linux required, knowledge of Real-Time Operating Systems a plus. - Understanding network, web, IoT, and industrial-related protocols (such as TCP/UDP, HTTPS, MQTTS, CoAP, Modbus, Ethernet/IP, DNP3, OPC-UA, etc.) - Excellent written and verbal communication skills. - Strong sense of ownership, urgency, and drive - Sharp analytical skills with the ability to synthesize new information quickly. (Note: Additional details about the company were not included in the provided job description),