Senior OT/ICS Penetration Tester & AI Security Researcher

EPAM Systems Inc; Kraków; Híbrido; PLN 260.000 - 380.000; Tempo integral

Resumo da vaga

EPAM Systems Inc is seeking a research-minded Senior Security Penetration Tester focused on OT/ICS security, exploit development, and AI/LLM security. You will break real industrial environments safely, write exploits, and test LLM applications and agentic AI systems.

You will deliver engagements end-to-end and contribute to client zero-day programs, building AI-driven tooling to scale capabilities. The role requires deep technical breadth, the ability to explain findings to engineers and

Qualificações

• Bachelor's degree in Computer Science, Information Security or related field, or equivalent practical experience.
• 5+ years of hands-on penetration testing and offensive security experience with depth in OT/ICS security, exploit development or AI/LLM security.
• Experience testing OT/ICS environments, and safety-first testing practices.
• Proven exploit-writing ability with CVE credits, advisories or talks.
• Hands-on experience testing LLM applications or agentic AI systems and understanding of model/tool permissions.
• Strong programming skills in Python and C/C++, with knowledge of x86/x64 and ARM assembly; Bash/PowerShell.
• Proficiency with reverse engineering and debugging tools (IDA Pro, Ghidra, Binary Ninja, WinDbg, GDB with pwndbg/GEF).
• Familiarity with fuzzers (AFL++, libFuzzer, boofuzz) and offensive tooling (Burp Suite, Metasploit, Nmap) and Wireshark.

Responsabilidades

• Plan and perform safety-first penetration tests of OT/ICS environments including policy-compliant segmentation testing.
• Assess PLCs/RTUs/HMIs/SCADA servers and engineering workstations across major vendors.
• Test industrial protocols for authentication, integrity and logic weaknesses.
• Build digital-twin labs to validate attack paths prior to production testing and follow engagement rules.
• Map findings to ISA/IEC 62443, NIST SP 800-82 and MITRE ATT&CK for ICtS with practical remediation guidance.
• Conduct vulnerability research on binaries, firmware, embedded/IoT devices, and enterprise software using various analysis methods.
• Write PoCs and weaponized exploits for memory corruption and logic flaws; identify authentication bypass vectors.
• Attack LLM applications and agentic AI systems; evaluate model, retrieval, tools and permissions impact.
• Contribute original research to client zero-day program and help build AI-driven tooling to scale offense.
• Deliver client engagements end-to-end and communicate findings clearly to engineers and executives.

Conhecimentos

Python

C/C++

Reverse engineering

Fuzzing

Exploit development

OT/ICS security

AI/LLM security

Attack testing

Communication with engineers/executive

Formação

Bachelor's degree in Computer Science or related field

Ferramentas

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

pwndbg/GEF

Burp Suite

Metasploit

Nmap

Wireshark

Descrição da vaga

EPAM Systems Inc is seeking a research-minded Senior Security Penetration Tester focused on OT/ICS security, exploit development, and AI/LLM security. You will break real industrial environments safely, write exploits, and test LLM applications and agentic AI systems.

You will deliver engagements end-to-end and contribute to client zero-day programs, building AI-driven tooling to scale capabilities. The role requires deep technical breadth, the ability to explain findings to engineers and