SCADA / ICS Security Engineer APPLIED AI RE VR SIEMENS SCHNEIDER ABB New York, NY / On Site →

Zealot Labs, Inc.; Greater London; Híbrido; GBP 100.000 - 195.000; Jornada completa

Descripción de la vacante

Zealot is an early-stage London startup building AI-driven security tooling for critical infrastructure. The role focuses on discovering vulnerabilities in SCADA/ICS and developing scalable AI systems to exploit and test them.

You will reverse engineer PLC firmware, work with industrial protocols, and bridge IT/OT with tooling in C/C++ or Python. On-site in London; growth potential and equity.

Formación

• Strong SCADA/ICS vulnerability research background.
• Experience reverse engineering PLC firmware.
• Proficient in C/C++ or Python for tooling and exploit development.
• Understanding OT/IT boundary weaknesses and Purdue model concepts.

Responsabilidades

• Build AI-driven systems that discover vulnerabilities in SCADA/ICS environments.
• Reverse engineer industrial protocols and PLC firmware for data generation.
• Develop tooling bridging IT/OT boundaries at scale across industrial classes.
• Transform expertise into training data, heuristics, and models.
• Perform vulnerability research and exploit development focused on access.
• Leverage familiarity with Modbus, DNP3, OPC-UA, EtherNet/IP, IEC 61850.

Conocimientos

SCADA/ICS vulnerability research

Exploit development

OT network architectures

C/C++

Python

PLC firmware reverse engineering

Industrial protocols knowledge

IT/OT boundary expertise

Herramientas

Modbus

DNP3

OPC-UA

EtherNet/IP

IEC 61850

Descripción del empleo

Zealot is deploying AI systems at the center of western cyber operations , backed by tier-1 US VCs and industry leaders. Our team includes alumni of Anthropic, xAI, and Anduril. Soon live with close U.S. allies abroad.

APPLIED AI RE VR SIEMENS SCHNEIDER ABB

Compensation 100K-195K + skin in the game equity

Location London, United Kingdom On Site

Stage Early-stage startup backed by tier 1 investors. Small, growing team with exceptionally high ownership.

• + Build AI-driven systems that discover vulnerabilities in SCADA/ICS environments (PLCs, RTUs, HMIs) and gain access at scale.
• + Reverse engineer proprietary industrial protocols and control system firmware to feed the models that find the next entry point.
• + Develop the AI tooling that bridges IT/OT boundaries at scale, not one target at a time, but across entire classes of industrial systems.
• + Turn your deep IC knowledge into training data, heuristics, and system understanding that makes machines as good at finding access as you are.
• + Strong experience with SCADA/ICS vulnerability research and exploit development focused on gaining access.
• + Familiarity with industrial protocols: Modbus, DNP3, OPC-UA, EtherNet/IP, IEC 61850.
• + Experience reverse engineering PLC firmware (Siemens, Allen-Bradley, Schneider, ABB).
• + Understanding of OT network architectures, Purdue model segmentation, and IT/OT boundary weaknesses.
• + Strong C/C++ or Python skills for tooling and exploit development.

Nice to Have

• + Published CVEs or advisories against IC/SCADA products.
• + Experience with HMI security (WinCC, FactoryTalk, Ignition).
• + Familiarity with safety instrumented systems (SIS) and their attack surfaces.
• + Experience with IC-specific fuzzing and protocol analysis tools.
• + Experience building with LLMs and AI agents.
• + Background in red team operations against critical infrastructure.
• + Motivated by the challenge of breaking into the systems that run critical infrastructure.
• + Clearly interested in stepping away from purely manual research and moving toward the development of AI systems.
• + Building something massive matters more to you than comfort, titles, or predictability.
• + You want to be early at a company that will change an industry, and you're ready to do what that actually takes.

Note to recruiting firms: SCADA/ICS vulnerability research focused on gaining access is the core requirement. This role is about finding and exploiting entry points, not effects delivery. Industrial protocol and PLC reversing experience are essential.