" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003ePenetration Tester with OT\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20361\"\u003e Security \u003c/li\u003e \u003cli data-id=\"20362\"\u003e Security Analyst \u003c/li\u003e \u003cli data-id=\"20363\"\u003e US - Remote \u003c/li\u003e \u003cli data-id=\"20364\"\u003e Contract \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 23/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cdiv class=\"description\"\u003e \u003cstrong\u003eAbout the Role:\u003c/strong\u003e\u003cbr\u003e Infinite Ranges is seeking an experienced\u0026nbsp;\u003cstrong\u003eLead\u003c/strong\u003e \u003cstrong\u003ePenetration Tester \u003c/strong\u003eto join a high-impact engagement. This role is all about offensive security\u0026mdash;building, scripting, and executing attack scenarios across a multitude of modern IT environments.\u003cbr\u003e You\u0027ll work hands-on with physical and virtual targets, execute/develop complex attack chains, and lead red team exercises. This is a unique opportunity to apply your offensive toolkit in a high-fidelity environment and leave a lasting impact on cyber readiness.\u003cbr\u003e\u003cbr\u003e \u003cstrong\u003eWhat You Will Be Doing:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eDevelop and execute \u003cstrong\u003epenetration testing campaigns\u003c/strong\u003e targeting various infrastructure devices.\u003c/li\u003e \u003cli\u003eSimulate realistic, multi-phase \u003cstrong\u003eattack chains\u003c/strong\u003e including lateral movement, privilege escalation, and multiple specific threat vectors.\u003c/li\u003e \u003cli\u003eCreate \u003cstrong\u003ecustom exploits, payloads, and evasion techniques\u003c/strong\u003e against emulated and physical assets.\u003c/li\u003e \u003cli\u003eWork closely with scenario designers to script repeatable red team exercises with measurable impact.\u003c/li\u003e \u003cli\u003eConduct \u003cstrong\u003ethreat emulation\u003c/strong\u003e using TTPs based on real-world APTs and adversaries.\u003c/li\u003e \u003cli\u003eDefine offensive toolkits and infrastructure within the environment.\u003c/li\u003e \u003cli\u003eDocument post-exercise findings, attack graphs, and defensive recommendations.\u003c/li\u003e \u003cli\u003eParticipate in workshops and live events to demo adversarial behavior and tactics.\u003c/li\u003e \u003c/ul\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cstrong\u003eWhat We Want To See:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e5+ years of experience in \u003cstrong\u003epenetration testing\u003c/strong\u003e, \u003cstrong\u003eethical hacking\u003c/strong\u003e, or \u003cstrong\u003ered team operations\u003c/strong\u003e.\u003c/li\u003e \u003cli\u003eStrong understanding of the \u003cstrong\u003eMITRE ATT\u0026amp;CK\u003c/strong\u003e and \u003cstrong\u003eICS ATT\u0026amp;CK, \u003c/strong\u003eand\u003cstrong\u003e OWASP\u003c/strong\u003e frameworks.\u003c/li\u003e \u003cli\u003eComfort using offensive security tools\u003c/li\u003e \u003cli\u003eProficiency with scripting and automation in multiple languages.\u003c/li\u003e \u003cli\u003eAbility to document complex attacks with clear objectives and results for both technical and non-technical audiences.\u003c/li\u003e \u003cli\u003eAbility to lead and train Red / Blue Teams on attack vectors, attacks, IRT\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eTechnologies Used in This Role:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eOffensive Tools: \u003cstrong\u003eMetasploit\u003c/strong\u003e, \u003cstrong\u003eCobalt Strike\u003c/strong\u003e, \u003cstrong\u003eKali Linux\u003c/strong\u003e, \u003cstrong\u003eImpacket\u003c/strong\u003e, \u003cstrong\u003eResponder\u003c/strong\u003e, \u003cstrong\u003enmap\u003c/strong\u003e, \u003cstrong\u003eBloodHound, Maltego, Burp Suite\u003c/strong\u003e\u003c/li\u003e \u003cli\u003eScripting: \u003cstrong\u003ePython\u003c/strong\u003e, \u003cstrong\u003eBash\u003c/strong\u003e, \u003cstrong\u003ePowerShell, VBA\u003c/strong\u003e\u003c/li\u003e \u003cli\u003ePlatforms: \u003cstrong\u003eGCP, \u003c/strong\u003e\u0026nbsp;\u003cstrong\u003eAWS\u003c/strong\u003e, \u003cstrong\u003eVMware, Azure\u003c/strong\u003e, \u003cstrong\u003eDocker, Windows, Mac, Linux\u003c/strong\u003e\u003c/li\u003e \u003cli\u003eVulnerability Analysis: \u003cstrong\u003eTenable\u003c/strong\u003e, \u003cstrong\u003eGreenbone OpenVAS\u003c/strong\u003e, \u003cstrong\u003eQualys\u003c/strong\u003e\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eBonus Points For:\u003c/strong\u003e\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cem\u003eCertifications like \u003cstrong\u003eOSCP\u003c/strong\u003e, \u003cstrong\u003eOSEP\u003c/strong\u003e, \u003cstrong\u003eGPEN\u003c/strong\u003e, \u003cstrong\u003eGXPN\u003c/strong\u003e, or \u003cstrong\u003eGRPT\u003c/strong\u003e\u003c/em\u003e\u003c/li\u003e \u003cli\u003eFamiliarity with \u003cstrong\u003ethreat intelligence integration\u003c/strong\u003e\u003c/li\u003e \u003cli\u003eBackground in \u003cstrong\u003eindustrial or manufacturing cybersecurity\u003c/strong\u003e\u003c/li\u003e \u003cli\u003eExperience mentoring blue teams / red teams\u003c/li\u003e \u003cli\u003eFamiliarity with \u003cstrong\u003eICS/OT environments\u003c/strong\u003e (e.g., SCADA, PLCs, HMIs, industrial protocols).\u003c/li\u003e \u003c/ul\u003e \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"568655\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "