Principal Penetration Tester
New
D
DragosOT cybersecurity
Location: United KingdomFull-TimePrincipal
SalarySalary: £105,000
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of hands-on cybersecurity experience
Requirements
- Bring 8+ years of hands-on cybersecurity experience in OT vulnerability assessment, penetration testing, or red teaming.
- Have in-depth knowledge of OT penetration testing methodologies in white-, gray-, and black-box contexts.
- Understand OT architectures and services, including DCS, historians, SCADA networks, transmission/distribution management, AMI, communication protocols, and control systems.
- Have extensive knowledge of OT cyber threats, attack paths, exploits, and adversary TTPs.
- Have hands-on experience with Metasploit, Nmap, Kali Linux, Cobalt Strike, Burp Suite, common LOTL toolsets, and C2 frameworks.
- Bring advanced experience with routers, switches, load balancers, and firewalls, and analyze network traffic and host data in a cybersecurity context.
- Have experience using large language models such as Claude for penetration testing execution and reporting, and validate AI-generated output while securely handling client data.
- Write reports and present findings clearly to technical and non-technical audiences.
- Work independently in a remote environment and coordinate across distributed teams.
- Be willing to travel up to 30–40% domestically and internationally for customer engagements.
Responsibilities
- Lead complex industrial penetration testing, purple teaming, and vulnerability assessment engagements.
- Define OT penetration testing methodologies, assessment frameworks, and red team tactics informed by threat intelligence.
- Design and lead offensive campaigns to uncover attack paths across IT/OT boundaries and industrial environments.
- Translate findings into R&D priorities for tools, behavioral analytics, and detection content.
- Evolve internal playbooks, runbooks, and operating procedures using field lessons and emerging adversary behaviors.
- Advise executive, technical, and customer stakeholders on cybersecurity risks and remediation.
- Represent Dragos through research, conference presentations, whitepapers, and public engagements.
- Mentor engineering, threat intelligence, and consulting teams.
View Full Description & ApplyYou'll be redirected to the employer's site
