Security Analyst

Securin; Chennai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Securin is looking for an experienced OT/ICS penetration tester to safeguard critical infrastructure and industrial environments. The role involves safety-first testing, asset discovery, and testing industrial protocols across vendors, with a focus on realistic remediation guidance.

You will conduct automated and manual assessments, develop exploit concepts, and document findings for technical and executive audiences. A willingness to travel for on-site assessments is expected.

Qualifications

• OT/ICS penetration testing in real industrial environments or high-fidelity labs.

Responsibilities

• Plan and execute safety-first penetration tests of OT/ICS environments.
• Assess PLCs, RTUs, HMIs, SCADA servers and engineering workstations.
• Test industrial protocols for authentication, integrity and logic weaknesses.
• Build lab or digital-twin replicas to validate attack paths.
• Map findings to ISA/IEC 62443 and NIST guidelines with remediation guidance.
• Write proofs-of-concept and exploits for memory corruption and logic flaws.
• Perform rapid vulnerability analysis of CVEs for clients and internal use.
• Apply AI-augmented techniques to scale offensive security testing.
• Prepare detailed reports and present findings to stakeholders.

Skills

OT/ICS security

Penetration testing

Exploit development

Python/C++

Reverse engineering

Vulnerability research

English communication

Education

Bachelor's degree in CS/IS/Engineering

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

Job description

Securin is anAI-native cybersecurity company. Our Pre-emptive Exposure Management Platformturns exposure data into clear decisions, giving organisations the confidenceto know which risks are exploitable, what to fix first, and how to act beforeattackers do.

Securindelivers penetration testing, vulnerability management and offensive researchfor enterprises, critical infrastructure operators and public-sector clients. Itis investing heavily in AI-augmented zero-day discovery and autonomousoffensive testing.

Job Summary:

• Plan and execute safety-first penetration testsof OT/ICS environments (water and wastewater, energy, manufacturing, buildingsystems), including passive asset discovery, Purdue-model segmentation testingand IT-to-OT pivot analysis.
• Assess PLCs, RTUs, HMIs, SCADA servers,historians and engineering workstations across major vendors (e.g.,Rockwell/Allen-Bradley, Siemens, Schneider Electric) and SCADA platforms (e.g.,VTScada, Ignition, AVEVA/Wonderware).
• Test industrial protocols such as Modbus/TCP,DNP3, EtherNet/IP/CIP, S7comm, OPC UA, BACnet and IEC 60870-5-104/61850 forauthentication, integrity and logic-manipulation weaknesses.
• Build and use lab or digital-twin replicas tovalidate attack paths before touching production; operate strictly withinclient-approved rules of engagement, change windows and safety constraints.
• Map findings to ISA/IEC 62443, NIST SP 800-82and MITRE ATT&CK for ICs, with remediation guidance that is realistic forplant operations.
• Conduct vulnerability research on binaries,firmware, embedded/IoT devices, web applications and enterprise software usingreverse engineering, source code review and fuzzing (coverage-guided,protocol-aware and grammar-based).
• Write reliable proof-of-concept and weaponizedexploits for memory corruption (stack/heap overflows, use-after-free, typeconfusion), logic flaws and authentication bypasses, including bypass of modernmitigations (ASLR, DEP/NX, CFG, stack canaries).
• Perform n-day analysis and patch diffing torapidly validate exploitability of newly disclosed CVEs for clients and forSecurin’s exposure intelligence.
• Apply AI-augmented techniques, such asLLM-assisted code review, agent-driven fuzz harness generation and automatedcrash triage, to scale discovery within Securin’s Zero Day program.
• Run coordinated vulnerability disclosure withvendors, CERTs and CNAs, and author technical advisories and researchpublications.

AI & Agentic System Pentesting

• Assess LLM applications, RAG pipelines,autonomous agents and tool integrations (including MCP servers and plugins) fordirect and indirect prompt injection, jailbreaks, sensitive data disclosure,excessive agency, insecure output handling, tool abuse and supply-chainweaknesses.
• Test against the OWASP Top 10 for LLMApplications, OWASP agentic AI threat guidance, MITRE ATLAS and the NIST AIRMF, and translate results into concrete architectural fixes.
• Build and operate automated adversarial testingharnesses (e.g., PyRIT, garak, promptfoo) and custom attack agents forrepeatable AI red teaming.
• Contribute offensive techniques and agentworkflows to Securin’s AI-driven offensive security platform and autonomouspentesting research.

Core Delivery & Team Contribution

• Conduct network, web application, API, cloud andred team engagements, emulating real-world adversaries using the MITREATT&CK framework.
• Develop and execute detailed test plans andmethodologies; manage engagement timelines, deadlines and client expectations.
• Prepare high-quality reports using Securintemplates and present findings to technical and executive stakeholders inkick-off calls and readouts.
• Advise developers, system administrators and OTengineers on secure configuration, coding best practices and remediation.
• Mentor analysts, contribute to internaltraining, methodology and tooling, and help shape report deliverables.

Requirements

• Minimum 2-5 years of hands-on penetration testingand offensive security experience, including significant depth in at least twoof: OT/ICS security, exploit development/vulnerability research, and AI/LLMsecurity.
• Demonstrated OT/ICS penetration testingexperience on real industrial environments or high-fidelity labs, with a stronggrasp of safety-first testing practices.
• Proven exploit-writing ability, evidenced byoriginal vulnerability research: CVE credits, published advisories or exploits,conference talks, or high-level bug bounty/CTF results.
• Hands-on experience testing LLM applications oragentic AI systems, with a working understanding of how models, retrieval,tools and permissions combine to create attack surface.
• Strong programming skills in Python and C/C++,and working knowledge of x86/x64 and ARM assembly; Bash/PowerShell required;Rust or Go a plus.
• Proficiency with reverse engineering anddebugging tools (IDA Pro, Ghidra, Binary Ninja, WinDbg, GDB with pwndbg/GEF),fuzzers (AFL++, libFuzzer, boofuzz) and offensive tooling (Burp Suite,Metasploit, Nmap, Wireshark with ICDissectors, C2 frameworks such as CobaltStrike or Sliver).
• Familiarity with industry standards andframeworks including OWASP Top 10, CVE/CWE, OSSTMM, NIST, MITRE ATT&CK,ISA/IEC 62443 and MITRE ATLAS.
• Bachelor’s degree in Computer Science,Information Security, Electrical/Control Engineering or a related field, orequivalent practical experience.
• Excellent written and spoken English; able toconvey complex technical concepts to technical and non-technical audiences.
• Based in Europe and eligible to work throughEPAM; able to overlap with US business hours for client meetings, and availablefor occasional travel (e.g., on-site OT assessments) when required.

PreferredCertifications

Certificationsare a plus, not a substitute for demonstrated skill. Public research, CVEs andexploits carry equal or greater weight.

Area

Preferred certifications /evidence

OT / IC security

• GIAC GICSP, GRID or GCIP;ISA/IEC 62443 Cybersecurity Specialist/Expert; SANSICS410/ICS515/ICS612training

AI / LLM security

• AI red teamingcertifications or training (e.g., HTB AI Red Teamer path, C-AI/MLPen), orpublished AI security research

Research track record

• CVE credits, vendoradvisories, Pwn2Own/DEF CON-level CTF results, bug bounty rankings,conference talks

Buildingwith AI: What We Expect:

Securin iscommitted to becoming an AI-native organization where GenAI is embedded intohow every team works: not as an occasional assistant, but as a core part ofdelivery, operations and how our expertise compounds over time. Everyone isexpected to integrate GenAI tools into daily workflows, understand theirlimitations, follow data classification rules, and move beyond using GenAI tobuilding with it. For this role in particular, we expect you to:

• Use GenAI tools (e.g., Claude, ChatGPT) dailyfor research, code generation, analysis and reporting, and validateAI-generated output before acting on it.
• Design and build multi-step AI agents foroffensive tasks with human-in-the-loop validation and sandboxed execution.
• Apply AI security fundamentals (prompt injectionrisk, data classification, responsible handling of client data) in your ownworkflows, not just in client tests.
• Connect GenAI tools to internal data sources andAPIs, and contribute reusable skills, templates and agent configurations toSecurin’s shared repository.
• Participate in AI adoption sprints, hackathonsand knowledge-sharing within the team.