Principal Penetration Tester

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Lead technical initiatives across vulnerability assessments, penetration testing, and adversary emulation for client projects.

• Act as the primary technical authority and trusted consultant for intricate industrial penetration testing, purple teaming, and vulnerability assessment projects.

• Establish OT penetration testing methodologies, assessment frameworks, and red team strategies informed by threat intelligence and adversary emulation.

• Plan and execute offensive campaigns to identify attack vectors across IT/OT boundaries and within industrial settings.

• Convert practical findings into strategic R&D focuses for proprietary tools, behavioral analytics, and detection content.

• Enhance internal playbooks, runbooks, and operational procedures.

• Collaborate with executive stakeholders by providing cybersecurity advice, risk assessment, and remediation strategies.

• Present to C-suite executives, board members, and technical leadership.

• Represent Dragos through original research, conference talks, whitepapers, and public engagements.

• Mentor teams in engineering, threat intelligence, and consulting across various functions.

⛳️ Requirements

• Over 8 years of practical cybersecurity experience in vulnerability assessment, penetration testing, or red teaming within the OT domain.

• Thorough understanding of OT penetration testing methodologies in white, gray, and black-box scenarios.

• Profound knowledge of OT-specific architectures and services, including DCS, historians, SCADA networks, transmission/distribution management, AMI, relevant communication protocols, and other control systems.

• Extensive familiarity with OT cyber threats, attack vectors, exploits, and adversary TTPs.

• Practical experience with tools such as Metasploit, Nmap, Kali Linux, Cobalt Strike, Burp Suite, common LOTL toolsets, and C2 frameworks.

• Advanced expertise with routers, switches, load balancers, and firewalls; ability to assess network traffic and host data in a cybersecurity context.

• Proven capability in utilizing large language models (e.g., Claude) to facilitate penetration testing execution and reporting, including reconnaissance, exploit development, and drafting findings.

• Strong judgment in validating AI-generated outputs and securely managing client data.

• Excellent report-writing and presentation abilities for both technical and non-technical audiences.

• Capacity to work independently in a remote setting and coordinate with distributed teams.

• Willingness to travel 30–40% domestically and internationally.

• Must successfully pass a background check as a condition of employment.

🏝️ Benefits

• Competitive Equity Package

• Comprehensive Benefits Plan