Senior Security Penetration Tester

We are looking for a research-minded Senior Security Penetration Tester who sits at the intersection of three disciplines: operational technology (OT/ICS) security, exploit development and zero-day discovery, and offensive testing of AI and agentic systems. This is not a scanner-driven role. You will break real industrial environments safely, write working exploits for vulnerabilities you find yourself, and attack LLM applications and autonomous agents the way a capable adversary would.

You will deliver client engagements end-to-end, contribute original research to the client's zero-day program, and help build the AI-driven tooling that scales our offensive capability.

suits someone who enjoys going deep on hard targets and can explain what they found to both engineers and executives.

Plan and execute safety-first penetration tests of OT/ICS environments (water and wastewater, energy, manufacturing, building systems), including passive asset discovery, Purdue-model segmentation testing and IT-to-OT pivot analysis Assess PLCs, RTUs, HMIs, SCADA servers, historians and engineering workstations across major vendors (e.g., Rockwell/Allen-Bradley, Siemens, Schneider Electric) and SCADA platforms (e.g., VT

• Scada, Ignition, AVEVA/Wonderware) Test industrial protocols such as Modbus/TCP, DNP3, Ether
• Net/IP/CIP, S7comm, OPC UA, BA
• Cnet and IEC [phone]/61850 for authentication, integrity and logic-manipulation weaknesses Build and use lab or digital-twin repl