OT & Hardware Security Consultant - ICS Pen Testing

Pen Test Partners; United Kingdom; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

24 development days per year

Conference attendance

Paid training and exams

Blog bounty programme

HTB/TryHackMe access

Job summary

Pen Test Partners in the United Kingdom is seeking a hardware and OT security consultant focused on operational technology. You will spend time in control rooms, substations, warehouses and vessels, supporting engineers who run those systems.

The role suits someone early in their career with a solid networking foundation and a willingness to work on site across the UK and internationally. Experience with SCADA/OT platforms and hardware security is valued.

Qualifications

• Awareness of industrial control system and operational technology architectures, components and protocols, such as Modbus, DNP3, IEC 104, IEC 61850 and OPC UA
• Network and infrastructure penetration testing skills, including segmentation testing and review of switch, router and firewall configuration
• Strong network protocol analysis using tools such as Wireshark
• Excellent ability to learn new technologies, systems and languages
• Ability to script in appropriate languages to facilitate testing
• A keen interest in embedded systems, IoT and hardware
• Willingness to work on client sites across the UK and internationally, and to hold your own with the engineers and operators who run the systems being tested
• Experience working with SCADA and control system platforms, such as GE PowerOn, AVEVA System Platform or Siemens WinCC
• Demonstrated hardware security skills, either in a professional or hobbyist sphere
• An understanding of reverse engineering, experience using tools such as Ghidra, with particular focus on ARM and x86 architectures
• Penetration testing skills in web application, API and mobile applications
• Threat modelling knowledge, being able to determine which attacks and assets are highest risk for different classes of system
• Experience in analysing RF protocols such as BLE, Zigbee, LoRa, Wi-Fi, and proprietary ISM band protocols
• An understanding of cryptography and common mistakes made
• Familiarity with IEC 62443 and similar frameworks
• Experience working in industrial, utility, warehouse or maritime environments, either as a pen tester, IT, engineering, or operations role

Responsibilities

• Reporting into the Head of Hardware delivering OT, hardware and pen testing services, from presales through to delivery and debrief
• Contributing towards research and our development of internal tools and processes
• Helping to upskill others into the hardware and OT team

Skills

Industrial control systems

Networking basics

Live systems testing

Threat modelling

Reverse engineering mindset

Embedded systems interest

Willingness to travel

SCADA/OT awareness

Cryptography knowledge

Tools

Wireshark

Ghidra

GE PowerOn

AVEVA System Platform

Siemens WinCC

Job description

Pen Test Partners in the United Kingdom is seeking a hardware and OT security consultant focused on operational technology. You will spend time in control rooms, substations, warehouses and vessels, supporting engineers who run those systems.

The role suits someone early in their career with a solid networking foundation and a willingness to work on site across the UK and internationally. Experience with SCADA/OT platforms and hardware security is valued.