OT PENETRATION TESTER

Carry out OT/ICS penetration tests and security assessments on client industrial sites and systems, usually 1–2 week engagements. (Brief)

Write and present a technical report with findings, risk ratings and remediation recommendations. (Brief)

Assess network architecture and segmentation (firewalls, switches, zones and conduits) against IEC 62443. (Brief)

Analyse industrial protocols and network traffic (Modbus, Profinet, OPC UA, DNP3) to find weaknesses.

Test control systems such as Honeywell, Emerson, Yokogawa and ABB DCS, PLCs, HMIs and engineering workstations, using safe, non-disruptive methods.

Agree scope, rules of engagement and safety constraints with the asset owner before testing.