Lead OT/IT Penetration Tester: Industrial & IT Security

Catalyic Security; Lahore; On-site; PKR 1,800,000 - 3,600,000; Full time

Job summary

Catalyic Security is seeking a Senior OT/IT Penetration Tester to lead testing engagements across enterprise IT networks and industrial OT environments. You will identify vulnerabilities, guide junior testers, and deliver remediation guidance while ensuring safety in sensitive operations.

You will assess AD, Windows, Linux, ICS/SCADA, Modbus/DNP3/OPC environments, document findings in clear reports, and apply industry standards (IEC 62443, NIST SP 800-82, MITRE ATT&CK for IC).

Qualifications

• 5+ years of experience in penetration testing, with demonstrated OT assessment experience.
• Strong knowledge of Windows, Linux, and Active Directory attack techniques.
• Hands-on experience with industrial control systems and OT network architectures.
• Familiarity with IEC 62443, NIST SP 800-82, and MITRE ATT&CK for IC.
• Proficiency with Burp Suite, Nmap, Metasploit, BloodHound, and Wireshark.
• Strong report writing and technical communication skills.
• Ability to lead engagements and manage multiple projects.

Responsibilities

• Lead end-to-end IT and OT penetration testing engagements.
• Plan and execute testing with safety controls to avoid disruption to live operations.
• Document findings in clear, actionable technical reports.
• Recommend fixes and support client teams through remediation.
• Guide junior testers on methodology, tooling, and safe testing practices.

Skills

Penetration testing

OT assessment

Active Directory

Windows

Linux

Industrial control systems

Education

Bachelor's degree in Cyber Security / Computer Science / IT

OSCP

CRTP

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Wireshark

Job description

Catalyic Security is seeking a Senior OT/IT Penetration Tester to lead testing engagements across enterprise IT networks and industrial OT environments. You will identify vulnerabilities, guide junior testers, and deliver remediation guidance while ensuring safety in sensitive operations.

You will assess AD, Windows, Linux, ICS/SCADA, Modbus/DNP3/OPC environments, document findings in clear reports, and apply industry standards (IEC 62443, NIST SP 800-82, MITRE ATT&CK for IC).