Penetration Tester with OT

Infinite Ranges, Inc.; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Infinite Ranges, Inc. is seeking an experienced Lead Penetration Tester to join a high-impact engagement. This role focuses on offensive security—building, scripting, and executing attack scenarios across a variety of IT environments.

You will work hands-on with physical and virtual targets, develop complex attack chains, lead red team exercises, and document findings with actionable recommendations to improve cyber readiness.

Qualifications

• 5+ years of experience in penetration testing or red team operations.
• Strong knowledge of MITRE ATT&CK, ICT ATT&CK, and OWASP.
• Comfort using offensive security tools.
• Scripting and automation in multiple languages.
• Ability to document complex attacks clearly for diverse audiences.
• Lead and train Red/Blue Teams on attack vectors and IRT.

Responsibilities

• Develop and execute penetration testing campaigns targeting various infrastructure devices.
• Simulate realistic, multi-phase attack chains including lateral movement, privilege escalation, and multiple specific threat vectors.
• Create custom exploits, payloads, and evasion techniques against emulated and physical assets.
• Work closely with scenario designers to script repeatable red team exercises with measurable impact.
• Conduct threat emulation using TTPs based on real-world APTs and adversaries.
• Define offensive toolkits and infrastructure within the environment.
• Document post-exercise findings, attack graphs, and defensive recommendations.
• Participate in workshops and live events to demo adversarial behavior and tactics.

Skills

Penetration testing

Red team operations

Scripting & automation

MITRE ATT&CK

ICT ATT&CK

OWASP frameworks

Tools

Metasploit

Cobalt Strike

Kali Linux

Impacket

Responder

nmap

BloodHound

Maltego

Burp Suite

Job description

About The Role

Infinite Ranges is seeking an experienced

Infinite Ranges is seeking an experienced Lead Penetration Tester to join a high-impact engagement. This role is all about offensive security—building, scripting, and executing attack scenarios across a multitude of modern IT environments.
You'll work hands-on with physical and virtual targets, execute/develop complex attack chains, and lead red team exercises. This is a unique opportunity to apply your offensive toolkit in a high-fidelity environment and leave a lasting impact on cyber readiness.

What You Will Be Doing

• Develop and execute penetration testing campaigns targeting various infrastructure devices.
• Simulate realistic, multi-phase attack chains including lateral movement, privilege escalation, and multiple specific threat vectors.
• Create custom exploits, payloads, and evasion techniques against emulated and physical assets.
• Work closely with scenario designers to script repeatable red team exercises with measurable impact.
• Conduct threat emulation using TTPs based on real-world APTs and adversaries.
• Define offensive toolkits and infrastructure within the environment.
• Document post-exercise findings, attack graphs, and defensive recommendations.
• Participate in workshops and live events to demo adversarial behavior and tactics.

What We Want To See

• 5+ years of experience in penetration testing, ethical hacking, or red team operations.
• Strong understanding of the MITRE ATT&CK and ICT ATT&CK, and OWASP frameworks.
• Comfort using offensive security tools
• Proficiency with scripting and automation in multiple languages.
• Ability to document complex attacks with clear objectives and results for both technical and non-technical audiences.
• Ability to lead and train Red / Blue Teams on attack vectors, attacks, IRT

Technologies Used in This Role:

• Offensive Tools: Metasploit, Cobalt Strike, Kali Linux, Impacket, Responder, nmap, BloodHound, Maltego, Burp Suite
• Scripting: Python, Bash, PowerShell, VBA
• Platforms: GCP, AWS, VMware, Azure, Docker, Windows, Mac, Linux
• Vulnerability Analysis: Tenable, Greenbone OpenVAS, Qualys

Bonus Points For:

• Certifications like OSCP, OSEP, GPEN, GXPN, or GRPT
• Familiarity with threat intelligence integration
• Background in industrial or manufacturing cybersecurity
• Experience mentoring blue teams / red teams
• Familiarity with IC S/OT environments (e.g., SCADA, PLCs, HMIs, industrial protocols).