Senior OT ICS Penetration Tester and Red Team Specialist

Atos
India
Workplace: HybridFull timeFunction: CybersecurityExperience: 6-10 yearsSkills: ["Risk assessment","Stakeholder coordination","Technical reporting","Remediation planning","Safety awareness"]

Conduct authorized OT/ICS penetration testing and red-team adversary simulations across industrial and critical-infrastructure environments. Plan and execute assessments spanning Purdue Levels 0–3, evaluate OT network segmentation and attack paths between IT/OT boundaries, and test SCADA, HMIs, historians, engineering workstations, PLC communication paths, and connected applications. Map findings to MITRE ATT&CK frameworks, coordinate with OT/safety/SOC stakeholders, and deliver technical and executive reports with practical remediation recommendations.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Atos
Atos
7 hours ago

Senior OT ICS Penetration Tester and Red Team Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Conduct authorized OT/ICS penetration testing and red-team adversary simulations across industrial and critical-infrastructure environments. Plan and execute assessments spanning Purdue Levels 0–3, evaluate OT network segmentation and attack paths between IT/OT boundaries, and test SCADA, HMIs, historians, engineering workstations, PLC communication paths, and connected applications. Map findings to MITRE ATT&CK frameworks, coordinate with OT/safety/SOC stakeholders, and deliver technical and executive reports with practical remediation recommendations.
Location: India
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Plan and execute authorized OT/ICS penetration testing across Purdue Levels 0–3, including IT-to-OT and OT-to-IT attack-path assessments.
  • •Evaluate OT network architecture (segmentation, industrial DMZs, jump servers, remote-access and vendor-access paths) and identify vulnerabilities and insecure configurations.
  • •Test SCADA and industrial components (HMIs, historians, engineering/operator workstations) and review PLC communication paths using passive/simulated/laboratory or approved techniques.
  • •Design and run controlled adversary-simulation and red-team exercises (including privilege escalation, lateral movement, identity and credential-theft scenarios) aligned to MITRE ATT&CK.
  • •Define safety governance (rules of engagement, stop conditions, rollback and escalation), coordinate with plant operations and SOC teams, and deliver technical/executive reports with remediation recommendations.
Travel: Medium travel

Key Requirements

  • •6–10 years of experience conducting OT/ICS penetration testing and controlled security assessments.
  • •Strong knowledge of OT network architecture, segmentation, firewalls, industrial DMZs, remote-access solutions, and vendor access paths.
  • •Experience assessing SCADA environments, HMIs, historians, engineering/operator workstations, and PLC communication paths using production-safe techniques.
  • •Ability to perform red-team and adversary-simulation exercises and map activities to MITRE ATT&CK for ICS and MITRE ATT&CK Enterprise.
  • •Experience preparing risk-assessed assessment plans, rules of engagement, reporting, and remediation recommendations.
Experience:6-10 years
Skills:Risk assessmentStakeholder coordinationTechnical reportingRemediation planningSafety awareness
Tech Stack:SCADAICSOTPurdue LevelsHMIsHistoriansPLCMITRE ATT&CK for ICSMITRE ATT&CK EnterpriseActive DirectoryWindowsLinuxSOCSCADA systemsNetwork segmentationIndustrial DMZsFirewalls

Company Brief

Atos
Global digital services and consulting firm delivering cloud, cybersecurity, big data, digital workplace, and managed services to enterprise and public sector clients. Provides IT transformation, systems integration, and outsourcing solutions worldwide.
Industry: Consulting
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Bezons, France
Founded: 1997
WebsiteLinkedIn