Job Description

Our Company
We're Hitachi Digital, a company at the forefront of digital transformation and the fastest growing division of Hitachi Group. We're crucial to the company's strategy and ambition to become a premier global player in the massive and fast-moving digital transformation market.
Our group companies, including GlobalLogic, Hitachi Digital Services, Hitachi Vantara and more, offer comprehensive services that span the entire digital lifecycle, from initial idea to full-scale operation and the infrastructure to run it on. Hitachi Digital represents One Hitachi, integrating domain knowledge and digital capabilities, and harnessing the power of the entire portfolio of services, technologies, and partnerships, to accelerate synergy creation and make real-world impact for our customers and society as a whole.
Imagine the sheer breadth of talent it takes to unleash a digital future. We don't expect you to 'fit' every requirement - your life experience, character, perspective, and passion for achieving great things in the world are equally as important to us.
Meet Our Team:
We are the Global Cyber team, part of Global Information Security at Hitachi Digital. Our mission is to protect the company's and its customers' vital information systems and data while responding to attacks, intrusions, and other security incidents. As passionate advocates of information security, we are a team of out-of-the-box thinkers, innovators, and collaborative problem-solvers. We continuously seek new and better ways to enhance our practices and strive for nothing less than excellence in our cybersecurity operations. We are looking for highly motivated individuals with a positive attitude who want to be part of something exceptional.
What You'll Be Doing:
As a Red Teaming & Web Application Security Specialist, you will be responsible for conducting advanced offensive security assessments to identify vulnerabilities across applications, infrastructure, and processes. This role will blend adversary simulation (Red Team) exercises with deep web application penetration testing to proactively uncover and remediate security weaknesses before they can be exploited by malicious actors.
Key Responsibilities:
Red Teaming & Adversary Simulation

• Plan, execute, and document red team engagements simulating realistic cyberattacks against the organization's systems, applications, and users.
• Emulate threat actors' tactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK.
• Conduct physical security assessments, social engineering campaigns (phishing, vishing), and insider threat simulations as required.
• Collaborate with the Blue Team to validate detection and response capabilities, providing actionable improvement plans.

Web Application Security

• Perform manual and automated web application penetration testing using tools like Burp Suite, OWASP ZAP, and custom scripts.
• Identify, validate, and exploit vulnerabilities such as injection flaws, authentication bypass, XSS, CSRF, SSRF, and insecure deserialization.
• Work with development teams to remediate findings and ensure secure coding practices.
• Conduct source code reviews to detect and eliminate security flaws.

Security Research & Tool Development

• Develop and maintain custom tools, scripts, and exploits to enhance testing capabilities.
• Stay current with emerging attack vectors, zero-days, and security trends.
• Perform threat modeling and provide secure architecture recommendations.

What you'll bring:

• 7 years of experience in Web security and red teaming
• Plan, execute, and document red team engagements simulating realistic cyberattacks against the organization's systems, applications, and users.
• Emulate threat actors' tactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK.
• Conduct physical security assessments, social engineering campaigns (phishing, vishing), and insider threat simulations as required.
• Collaborate with the Blue Team to validate detection and response capabilities, providing actionable improvement plans.
• Perform manual and automated web application penetration testing using tools like Burp Suite, OWASP ZAP, and custom scripts.
• Identify, validate, and exploit vulnerabilities such as injection flaws, authentication bypass, XSS, CSRF, SSRF, and insecure deserialization.
• Work with development teams to remediate findings and ensure secure coding practices.
• Conduct source code reviews to detect and eliminate security flaws.
• Develop and maintain custom tools, scripts, and exploits to enhance testing capabilities.
• Stay current with emerging attack vectors, zero-days, and security trends.
• Perform threat modeling and provide secure architecture recommendations.
• If you are passionate about cybersecurity and ready to work with a top-tier SOC team, we invite you to join us at Hitachi Digital.

About us
We're a global, 1000-strong, diverse team of professional experts, promoting and delivering Social Innovation through our One Hitachi initiative (OT x IT x Product) and working on projects that have a real-world impact. We're curious, passionate and empowered, blending our legacy of 110 years of innovation with our shaping our future. Here you're not just another employee; you're part of a tradition of excellence and a community working towards creating a digital future.
#LI-RR1

Skills Required