Security Test Engineer

KONE Cybersecurity is an organization of experts responsible for developing and managing cybersecurity in KONE globally.

We are looking for a

Security Test Engineer

to join our team of Cybersecurity professionals!

Are you an experienced product security professional and enthusiastic to improve security of solutions used each day globally to ensure smooth people flow? Our IoT security team, within the wider KONE Technology & Innovation unit and KONE Cybersecurity, is working on protecting the physical world – escalators and elevators – as well as their integration with smart and connected digital systems on the cloud. We are now looking for a new team member to join our global team of professionals.

Buzzwords: IoT & embedded security, pen testing, secure development lifecycle, hardware security

We are looking for an exceptional IoT Hardware Penetration Tester to join our innovative team. This role demands a sharp focus on hardware pentesting, firmware reversing, and wireless protocol testing, including BLE, Bluetooth, and Wi-Fi. The ideal candidate will also possess expertise in cryptography breaking and network penetration testing, with a strong emphasis on thorough reporting of findings.

In this role, you get to:

• Test and assess security of KONE products.
• Work together with development teams to support the secure design & technical implementation of the solutions based on your findings.
• Ensure our products meets the standard and regulatory requirements according to the IEC 62443-4-1 Security verification and validation testing practice.

Who/what are we looking for?                                                            

• Relevant working experience on security of embedded and/or IoT systems, including reporting vulnerabilities.
• Develop and execute innovative penetration testing methodologies tailored to the specific characteristics of IoT devices.
• Document and analyze security findings meticulously, providing clear, actionable remediation recommendations for identified vulnerabilities.
• Strong knowledge of IoT protocols (e.g., MQTT, CoAP, BLE, Wi-Fi, LoRA) and embedded systems.
• Strong proficiency in hardware reverse engineering techniques, including desoldering, chip extraction, and logic analysis.
• Solid understanding of firmware analysis techniques, including disassembly, buffer overflows, memory corruption, and privilege escalation.
• Ruthlessly break cryptographic primitives used in IoT devices, including symmetric-key, asymmetric-key, and hash functions.
• Practical experience with security testing tools (in addition to pen testing tools preferably also SAST, DAST, software composition analysis, reverse engineering, fuzzing, etc.)
• Coding/scripting and code review skills in at least one language (C/C++, Java, Python) would be preferred.
• Excellent communication skills in English, both written and oral, needed to bring visibility to your findings and their security impact.
• Uncover and exploit vulnerabilities in network communication, including network protocols, firewalls, and VPNs.
• Good problem-solving skills, service focused approach and positive attitude towards goals.

You would love this job if you have experience in some of the following and want to learn the rest:

• HW security mechanisms in IoT or mobile devices (such as protecting secrets).
• Cryptography and its applications (signing, encryption, PKI).
• Applying cybersecurity standards (IEC 62443 preferred).

Why to join KONE’s cybersecurity team?  

KONE is on a digitalization journey and our elevators are transforming from a steel box on the end of a rope into central platforms of smart buildings. We are bringing totally new kinds of innovative solutions to the market to enable even smarter people flow. As our offering becomes more digital, excellent cybersecurity plays a crucial role in building customer trust.  

This position is located in Chennai, India.

Contact information:

We will be reviewing applications on an ongoing basis, so we would like to hear from you as soon as possible. For further information, please contact Mika Katara, mika.katara@kone.com.

If you think this could be your next inspiring career challenge, please send your CV and cover letter via Workday by xy Jan, 2025.

At KONE, we are focused on creating an innovative and collaborative working culture where we value the contribution of each individual. Employee engagement is a key focus area for us and we encourage participation and the sharing of information and ideas. Sustainability is an integral part of our culture and the daily practice. We follow ethical business practices and we seek to develop a culture of working together where co-workers trust and respect each other and good performance is recognized. In being a great place to work, we are proud to offer a range of experiences and opportunities that will help you to achieve your career and personal goals and enable you to live a healthy and balanced life.

Read more on www.kone.com/careers