ICS Vulnerability Researcher

What You'll Do

• Build AI-driven systems that discover vulnerabilities in SCADA/ICS environments (PLCs, RTUs, HMIs) and gain access autonomously.
• Reverse engineer proprietary industrial protocols and control system firmware to feed models that identify the next entry point.
• Develop AI tooling that bridges IT/OT boundaries at scale, across entire classes of industrial systems rather than one target at a time.
• Turn deep ICS expertise into training data, heuristics, and system understanding to improve machine-driven access discovery.

Requirements

• Strong experience with SCADA/ICS vulnerability research and exploit development focused on gaining access.
• Familiarity with industrial protocols: Modbus, DNP3, OPC-UA, EtherNet/IP, IEC 61850.
• Experience reverse engineering PLC firmware from vendors such as Siemens, Allen-Bradley, Schneider, and ABB.
• Understanding of OT network architectures, Purdue model segmentation, and IT/OT boundary weaknesses.
• Strong C/C++ or Python skills for tooling and exploit development.

Nice to Have

• Published CVEs or security advisories for ICS/SCADA products.
• Experience with HMI exploitation (WinCC, FactoryTalk, Ignition).
• Familiarity with Safety Instrumented Systems (SIS) and related attack surfaces.
• Experience with ICS-specific fuzzing and protocol analysis tools.
• Experience building with LLMs and AI agents.
• Background in red team operations targeting critical infrastructure.

You Are

• Motivated by the challenge of breaking into systems that operate critical infrastructure.
• Interested in moving from purely manual research toward AI system development.
• More driven by building something large and impactful than by comfort, titles, or predictability.
• Excited to join early at a company aiming to transform an industry.

For Recruiters

• Core requirement: SCADA/ICS vulnerability research focused on gaining access.
• This role is centered on finding and exploiting entry points, not effects delivery.
• Industrial protocol expertise and PLC reverse engineering experience are essential.