Senior OT/ICS Pen Tester & AI Security Researcher

EPAM Systems; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

EPAM Systems Inc. seeks a research-minded Senior Security Tester operating at the nexus of OT/ICS security, exploit development, and offensive testing of AI systems.

You will break real industrial environments safely, write exploits, and assess LLM applications with attacker-like methodology. You will deliver client engagements end-to-end, contribute original research to zero-day programs, and help build AI-driven tooling to scale offensive capability while adhering to safety and engagement

Qualifications

• Bachelor's degree or equivalent practical experience in CS/InfoSec/Engineering.
• 5+ years of hands-on pentesting and offensive security, with OT/ICS, exploit development or AI/LLM focus.
• Experience testing LLMs or agentic AI systems and understanding attack surface.
• Proficiency in Python, C/C++, assembly, scripting languages and debugging tools.
• Knowledge of ISA/IEC 62443, NIST, MITRE ATT&CK and related security frameworks.

Responsibilities

• Plan and execute safety-first penetration tests of OT/ICS environments.
• Assess PLCs/RTUs/HMIS/SCADA across vendors.
• Test industrial protocols for authentication and integrity weaknesses.
• Build lab/digital-twin replicas to validate attack paths.
• Map findings to security frameworks and provide remediation guidance.
• Conduct vulnerability research on binaries, firmware, and web apps.
• Write proof-of-concept exploits for memory corruption and bypasses.
• Deliver findings clearly to engineers and executives.

Skills

Python

C/C++

x86/x64

ARM assembly

Bash/PowerShell

Reverse engineering

Fuzzing

Penetration testing

OT/ICS security

Education

Bachelor's degree in Computer Science or related field

Electrical/Control Engineering or Information Security

Tools

IDA Pro

Ghidra

Binary Ninja

Burp Suite

Metasploit

Nmap

Job description

EPAM Systems Inc. seeks a research-minded Senior Security Tester operating at the nexus of OT/ICS security, exploit development, and offensive testing of AI systems.

You will break real industrial environments safely, write exploits, and assess LLM applications with attacker-like methodology. You will deliver client engagements end-to-end, contribute original research to zero-day programs, and help build AI-driven tooling to scale offensive capability while adhering to safety and engagement