Penetration Tester with OT

Infinite Ranges is hiring a Penetration Tester with OT to lead offensive security work that spans modern IT and operational technology environments. This onsite role in Texas focuses on building and running realistic attack scenarios, advancing red team execution, and translating results into clear, defensible outcomes.

In this position, you will design penetration testing campaigns, perform threat emulation aligned to established adversary tradecraft, and document findings with measurable impact across both emulated and physical targets.

Key Responsibilities

• Develop and execute penetration testing campaigns against a range of infrastructure devices.
• Simulate realistic, multi-phase attack chains, including lateral movement, privilege escalation, and multiple specific threat vectors.
• Create custom exploits, payloads, and evasion techniques targeting emulated and physical assets.
• Partner with scenario designers to script repeatable red team exercises with measurable impact.
• Perform threat emulation using TTPs based on real-world APTs and adversaries.
• Define offensive toolkits and supporting infrastructure inside the environment.
• Document post-exercise findings, including attack graphs and defensive recommendations.
• Participate in workshops and live events to demonstrate adversarial behavior and tactics.

Requirements

• 5+ years of experience in penetration testing, ethical hacking, or red team operations.
• Strong understanding of MITRE ATT&CK, ICS ATT&CK, and the OWASP frameworks.
• Comfort using offensive security tools.
• Proficiency in scripting and automation using multiple languages.
• Ability to document complex attacks with clear objectives and results for both technical and non-technical audiences.
• Ability to lead and train Red / Blue Teams on attack vectors, attacks, and IRT.

Tools and Technologies

• Metasploit, Cobalt Strike, Kali Linux, Impacket, Responder, nmap, BloodHound, Maltego, Burp Suite
• Python, Bash, PowerShell, VBA
• GCP, AWS, VMware, Azure, Docker
• Windows, Mac, Linux
• Tenable, Greenbone OpenVAS, Qualys

Bonus Points

• Certifications such as OSCP, OSEP, GPEN, GXPN, or GRPT
• Familiarity with threat intelligence integration
• Background in industrial or manufacturing cybersecurity
• Experience mentoring blue teams / red teams
• Familiarity with ICS/OT environments such as SCADA, PLCs, HMIs, and industrial protocols

Compensation: USD 100–125 per hour. Experience: 5+ years. Location: Texas (onsite).