Penetration Tester with OT

Infinite Ranges, Inc.; Texas; On-site; USD 140,000 - 200,000; Full time

Job summary

Infinite Ranges, Inc. is seeking an experienced Lead Penetration Tester to drive offensive security engagements across modern IT environments.

You will design and execute advanced attack scenarios, develop custom exploits, and lead red team exercises to improve cyber readiness. You will work hands-on with physical and virtual targets, document findings, and mentor teams on attack tactics, with a focus on MITRE ATT&CK, ICS ATT&CK, and OWASP frameworks.

Qualifications

• 5+ years of experience in penetration testing, ethical hacking, or red team operations.
• Strong knowledge of MITRE ATT&CK, ICS ATT&CK, and OWASP frameworks.
• Proficiency with offensive security tools and scripting in multiple languages.
• Ability to document complex attacks with clear objectives and results.
• Experience leading and training Red/Blue Teams.

Responsibilities

• Develop and execute penetration testing campaigns targeting various infrastructure devices.
• Simulate multi-phase attack chains including lateral movement and privilege escalation.
• Create custom exploits and evasion techniques against assets.
• Lead red team exercises and script repeatable scenarios.
• Document post-exercise findings, attack graphs, and recommendations.
• Participate in workshops and live events to demo adversarial tactics.

Skills

Penetration testing

Red team operations

Ethical hacking

MITRE ATT&CK

ICS ATT&CK

OWASP

Scripting & automation

Attack chain development

Lead training

Tools

Metasploit

Cobalt Strike

Kali Linux

Impacket

Responder

nmap

BloodHound

Burp Suite

Maltego

Greenbone OpenVAS

Qualys

Tenable

Job description

About the Role

Infinite Ranges is seeking an experienced Lead Penetration Tester to join a high-impact engagement. This role is all about offensive security—building, scripting, and executing attack scenarios across a multitude of modern IT environments. You'll work hands‑on with physical and virtual targets, execute/develop complex attack chains, and lead red team exercises. This is a unique opportunity to apply your offensive toolkit in a high‑fidelity environment and leave a lasting impact on cyber readiness.

What You Will Be Doing

• Develop and execute penetration testing campaigns targeting various infrastructure devices.
• Simulate realistic, multi-phase attack chains including lateral movement, privilege escalation, and multiple specific threat vectors.
• Create custom exploits, payloads, and evasion techniques against emulated and physical assets.
• Work closely with scenario designers to script repeatable red team exercises with measurable impact.
• Conduct threat emulation using TTPs based on real-world APTs and adversaries.
• Define offensive toolkits and infrastructure within the environment.
• Document post-exercise findings, attack graphs, and defensive recommendations.
• Participate in workshops and live events to demo adversarial behavior and tactics.

What We Want To See

• 5+ years of experience in penetration testing, ethical hacking, or red team operations.
• Strong understanding of the MITRE ATT&CK and ICS ATT&CK, and OWASP frameworks.
• Comfort using offensive security tools
• Proficiency with scripting and automation in multiple languages.
• Ability to document complex attacks with clear objectives and results for both technical and non-technical audiences.
• Ability to lead and train Red / Blue Teams on attack vectors, attacks, IRT

Technologies Used in This Role

• Offensive Tools: Metasploit, Cobalt Strike, Kali Linux, Impacket, Responder, nmap, BloodHound, Maltego, Burp Suite
• Scripting: Python, Bash, PowerShell, VBA
• Platforms: GCP, AWS, VMware, Azure, Docker, Windows, Mac, Linux
• Vulnerability Analysis: Tenable, Greenbone OpenVAS, Qualys

Bonus Points For

• Certifications like OSCP, OSEP, GPEN, GXPN, or GRPT
• Familiarity with threat intelligence integration
• Background in industrial or manufacturing cybersecurity
• Experience mentoring blue teams / red teams
• Familiarity with ICS/OT environments (e.g., SCADA, PLCs, HMIs, industrial protocols).