Senior OT/ICS Penetration Tester & AI Security Researcher

EPAM Systems; Turkey; Remote; TRY 6,030,000 - 9,045,000; Full time

Job summary

EPAM Systems Inc. seeks a research-minded Senior Security Tester at the intersection of OT/ICS security, exploit development, and AI/LLM security. You will break real industrial environments safely, write exploits, and assess AI/agentic systems while delivering engagements end-to-end.

You will map findings to ISA/IEC 62443, NIST 800-82 and MITRE ATT&CK for ICS, crafting practical remediation for plant operations and collaborating with engineers and executives.

Qualifications

• 5+ years of hands-on penetration testing and offensive security, including depth in at least two areas: OT/ICS, exploit development/vulnerability research, or AI/LLM security.
• Demonstrated OT/ICS penetration testing experience on real industrial environments or high-fidelity labs, with strong safety-first testing practices.
• Showcase of original vulnerability research through CVEs, advisories or exploits, conference talks, or bug bounty/CTF results.
• Hands-on experience testing LLM applications or agentic AI systems, understanding how models, retrieval, tools and permissions create attack surface.

Responsibilities

• Plan and execute safety-first penetration tests of OT/ICS environments (water, energy, manufacturing, building systems), including asset discovery, Purdue-model segmentation testing and IT-to-OT pivot analysis.
• Assess PLCs, RTUs, HMIs, SCADA servers, historians and engineering workstations across major vendors and SCADA platforms.
• Test industrial protocols such as Modbus/TCP, DNP3, EtherNet/IP/CIP, S7comm, OPC UA, BACnet and IEC 60870-5-104/61850 for authentication, integrity and logic manipulation weaknesses.
• Build and use lab or digital-twin replicas to validate attack paths before touching production, operating within client-approved rules of engagement and safety constraints.
• Map findings to ISA/IEC 62443, NIST SP 800-82 and MITRE ATT&CK for ICS, with remediation guidance realistic for plant operations.
• Conduct vulnerability research on binaries, firmware, embedded/IoT devices, web applications and enterprise software using reverse engineering, source code review and fuzzing.
• Write reliable proof-of-concept and weaponized exploits for memory corruption, logic flaws and authentication bypasses.
• Deliver client engagements end to end and communicate findings clearly to engineers and executives.

Skills

OT/ICS security

Exploit development

AI/LLM security

Python

C/C++

x86/x64

ARM assembly

Bash/PowerShell

Reverse engineering

Debugging tools

Education

Bachelor's degree in Computer Science, Information Security or related field

Tools

IDA Pro

Ghidra

Binary Ninja

AFL++

libFuzzer

boofuzz

Burp Suite

Metasploit

Nmap

Job description

EPAM Systems Inc. seeks a research-minded Senior Security Tester at the intersection of OT/ICS security, exploit development, and AI/LLM security. You will break real industrial environments safely, write exploits, and assess AI/agentic systems while delivering engagements end-to-end.

You will map findings to ISA/IEC 62443, NIST 800-82 and MITRE ATT&CK for ICS, crafting practical remediation for plant operations and collaborating with engineers and executives.