Senior OT/ICS Penetration Tester & AI Security Researcher

EPAM Systems Inc; United States; A distancia; USD 140.000 - 210.000; Jornada completa

Descripción de la vacante

EPAM Systems Inc is seeking a research-minded Senior Security Penetration Tester who sits at the intersection of OT/ICS security, exploit development and AI/agentic systems testing. This role goes beyond scanners, requiring you to safely break real industrial environments, write working exploits, and assess LLM applications and autonomous agents with the rigor of a capable adversary.

You will deliver client engagements end-to-end, contribute original research to the client’s zero-day program,

Formación

• Bachelor's degree in Computer Science, Information Security, Electrical/Control Engineering or related field, or equivalent practical experience.
• 5+ years of hands-on penetration testing and offensive security experience in OT/ICS or related fields.
• Experience with exploit-writing and vulnerability research demonstrated by CVEs, advisories, talks, or bug bounty results.
• Hands-on experience testing LLM applications or agentic AI systems and understanding how models, retrieval, tools and permissions create attack surface.
• Strong programming skills in Python and C/C++, with knowledge of x86/x64 and ARM assembly.
• Proficiency with reverse engineering and debugging tools (IDA Pro, Ghidra, Binary Ninja; WinDbg, GDB).
• Fuzzers (AFL++, libFuzzer) and offensive tooling (Burp Suite, Metasploit, Nmap) and C2 frameworks.

Responsabilidades

• Plan and execute safety-first penetration tests of OT/ICS environments (water, energy, manufacturing) including asset discovery and segmentation testing.
• Assess PLCs/RTUs/HMIs/SCADA servers and engineering workstations across major vendors and platforms.
• Test industrial protocols for authentication, integrity and logic weaknesses.
• Develop lab or digital-twin replicas to validate attack paths before production.
• Map findings to ISA/IEC 62443, NIST SP 800-82 and MITRE ATT&CK for ICSS with realistic remediation guidance.
• Conduct vulnerability research on binaries, firmware, embedded devices, web apps and enterprise software.
• Write proof-of-concept and weaponized exploits for memory corruption and authentication bypass.
• Attack LLM applications and agentic AI systems and contribute to client zero-day programs.
• Deliver engagements end-to-end and communicate findings clearly to engineers and executives.

Conocimientos

OT/ICS security

Exploit development

AI/LLM security

Python

C/C++

Reverse engineering

Fuzzing

Threat modeling

Educación

Bachelor's degree in CS/Engineering

Herramientas

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

Burp Suite

Metasploit

Nmap

Descripción del empleo

EPAM Systems Inc is seeking a research-minded Senior Security Penetration Tester who sits at the intersection of OT/ICS security, exploit development and AI/agentic systems testing. This role goes beyond scanners, requiring you to safely break real industrial environments, write working exploits, and assess LLM applications and autonomous agents with the rigor of a capable adversary.

You will deliver client engagements end-to-end, contribute original research to the client’s zero-day program,