Senior OT/ICS Penetration Tester for AI Security

EPAM; United States; Remote; USD 140,000 - 220,000; Full time

Job summary

EPAM is seeking a Senior Offensive Security Engineer focusing on operational technology security, exploit development, and AI/agentic systems testing. You will lead end-to-end client engagements, contribute to zero-day research programs, and develop AI-driven tooling to scale offensive capabilities.

The role requires hands-on OT/ICS testing in industrial environments, proficiency in reverse engineering and fuzzing, and deep knowledge of ISA/IEC 62443, MITRE ATT&CK for IC.

Qualifications

• Bachelor’s degree or equivalent practical experience in a relevant field.
• 5+ years of hands-on penetration testing and offensive security experience.
• Experience with OT/ICS security testing in real industrial environments or labs.

Responsibilities

• Plan and perform safety-first OT/ICS penetration tests across water, energy, manufacturing, and building systems.
• Assess PLCs, RTUs, HMIs, SCADA servers, historians, and workstations across major vendors.
• Test industrial protocols for authentication, integrity, and logic weaknesses.
• Create lab or digital-twin replicas to validate attack paths before production tests.
• Map findings to ISA/IEC 62443, NIST SP 800-82, MITRE ATT&CK for IC; provide remediation guidance.
• Write proof-of-concept exploits and research vulnerabilities; reverse engineer binaries/firmware.

Skills

OT/ICS security

Exploit development

AI/LLM security

Python

C/C++

Reverse engineering

Fuzzing

Binary analysis

Network security testing

Engagement delivery

Education

Bachelor's degree in Computer Science or related field

Tools

IDA Pro

Ghidra

WinDbg

GDB

Burp Suite

Metasploit

Nmap

Wireshark

Cobalt Strike

Sliver

Job description

EPAM is seeking a Senior Offensive Security Engineer focusing on operational technology security, exploit development, and AI/agentic systems testing. You will lead end-to-end client engagements, contribute to zero-day research programs, and develop AI-driven tooling to scale offensive capabilities.

The role requires hands-on OT/ICS testing in industrial environments, proficiency in reverse engineering and fuzzing, and deep knowledge of ISA/IEC 62443, MITRE ATT&CK for IC.