SCADA / ICS Security Engineer APPLIED AI RE VR SIEMENS SCHNEIDER ABB New York, NY / On Site →

Zealot Labs, Inc.; New York (NY); Presencial; USD 100.000 - 195.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity stake

Descripción de la vacante

Zealot Labs, Inc. seeks an aggressive security researcher to build AI-driven tooling for discovering vulnerabilities in SCADA/ICS environments. You will reverse engineer PLC firmware, analyze industrial protocols, and develop exploits to identify entry points.

Based in New York, NY, this on-site role offers substantial ownership via equity and a compensation range of 100k–195k plus skin in the game. You will join a small, ambitious team at an early-stage startup backed by top investors.

Formación

• Strong experience in SCADA/ICS vulnerability research and exploit development.

Responsabilidades

• Build AI-driven tooling to discover vulnerabilities in SCADA/ICS environments (PLCs, RTUs, HMIs).
• Reverse engineer industrial protocols and firmware to feed models that find entry points.
• Develop tooling that bridges IT/OT boundaries at scale across industrial systems.
• Turn deep IC knowledge into training data, heuristics, and system understanding for AI agents.

Conocimientos

C/C++

Python

Vulnerability research

Red teaming

Herramientas

Modbus

DNP3

OPC-UA

EtherNet/IP

IEC 61850

Descripción del empleo

Zealot is deploying AI systems at the center of western cyber operations , backed by tier-1 US VCs and industry leaders. Our team includes alumni of Anthropic, xAI, and Anduril. Soon live with close U.S. allies abroad.

APPLIED AI RE VR SIEMENS SCHNEIDER ABB

Compensation 100K-195K + skin in the game equity

Location New York, NY On Site

Stage Early-stage startup backed by tier 1 investors. Small, growing team with exceptionally high ownership.

• + Build AI-driven systems that discover vulnerabilities in SCADA/ICS environments (PLCs, RTUs, HMIs) and gain access at scale.
• + Reverse engineer proprietary industrial protocols and control system firmware to feed the models that find the next entry point.
• + Develop the AI tooling that bridges IT/OT boundaries at scale, not one target at a time, but across entire classes of industrial systems.
• + Turn your deep IC knowledge into training data, heuristics, and system understanding that makes machines as good at finding access as you are.
• + Strong experience with SCADA/ICS vulnerability research and exploit development focused on gaining access.
• + Familiarity with industrial protocols: Modbus, DNP3, OPC-UA, EtherNet/IP, IEC 61850.
• + Experience reverse engineering PLC firmware (Siemens, Allen-Bradley, Schneider, ABB).
• + Understanding of OT network architectures, Purdue model segmentation, and IT/OT boundary weaknesses.
• + Strong C/C++ or Python skills for tooling and exploit development.

Nice to Have

• + Published CVEs or advisories against IC/SCADA products.
• + Experience with HMI security (WinCC, FactoryTalk, Ignition).
• + Familiarity with safety instrumented systems (SIS) and their attack surfaces.
• + Experience with IC-specific fuzzing and protocol analysis tools.
• + Experience building with LLMs and AI agents.
• + Background in red team operations against critical infrastructure.
• + Motivated by the challenge of breaking into the systems that run critical infrastructure.
• + Clearly interested in stepping away from purely manual research and moving toward the development of AI systems.
• + Building something massive matters more to you than comfort, titles, or predictability.
• + You want to be early at a company that will change an industry, and you're ready to do what that actually takes.

Note to recruiting firms: SCADA/ICS vulnerability research focused on gaining access is the core requirement. This role is about finding and exploiting entry points, not effects delivery. Industrial protocol and PLC reversing experience are essential.

Ready?