Nozomi Networks is hiring a Security Researcher to join its expanding team.

In this role, you'll work at the forefront of OT and IoT security in our Swiss laboratory. You'll engage in cutting-edge research, including device and network analysis, 0-day vulnerability discovery, and attack detection improvement. This role offers hands-on experience with embedded devices, flexible work hours, relocation support, and opportunities for professional growth, including training, certifications, and conference participation.

You could be the next "Nozomier"! If this sounds like you, read on.

In this role you will:

• Embody the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust
• You will work in our Swiss laboratory, which replicates real-world environments, providing a valuable resource for conducting security research activities and experiments.
• You will be involved in multiple activities, including:
  • Analysis of wireless communications, reverse engineering of undocumented protocols, and development of corresponding dissectors
  • Design and development of strategies for wireless device identification and attack detection
  • Analysis and reverse engineering of embedded device firmware
  • Research of 0-day vulnerabilities and development of exploit Proof of Concepts (PoCs)
• You will also be in charge of:
  • Developing and integrating research results into our products in collaboration with Engineering team
  • Development of attack scenarios for integration into our laboratory for demonstration purposes
  • Proposing new research ideas and selecting future research topics in collaboration with management and the team
  • Planning research activities, managing involved people, and focusing on achieving final results and meeting deadlines
  • Preparing thorough documentation and reports of research results, and presenting them to management and potentially at conferences

To be successful in this role you will have:

• Proven experience in one or more of the following activities: security research, bug hunting, reverse engineering, penetration testing
• Expertise in a scripting language like Python, Ruby or Perl
• Experience in intrusion detection systems and network traffic analysis
• Experience analyzing binaries in both Windows and Linux environments
• Experience researching new vulnerabilities in embedded devices (Routers, PLCs, RTUs, HMI, etc.)
• Confidence working in environments with strong confidentiality and data privacy protocols
• Attitude to operate in environments including data covered by non-disclosure agreements and high-level of confidentiality
• OSCP, SANS GPEN/GREM, CISSP or similar certification preferred, but not required
• Experience attending CTFs

#LI-Onsite