OT Cybersecurity Engineer – Pen Testing, Purple Team

Role Overview

• Support the security of a global OT environment by implementing, and validating cybersecurity controls across ICS/OT systems.
• Perform risk and vulnerability assessments, contributing to secure architecture and strategy.
• Deliver hands-on implementation of OT security solutions such as segmentation, monitoring, and privileged remote access.
• Support controlled security testing and purple team activities to validate controls, identify attack paths, and improve detection and response.
• Analysis of security events, root cause investigation, and continuous improvement of monitoring and response capabilities.
• Collaborate with other teams to ensure a safe, non-disruptive security posture.

Requirements

• Hands-on experience in IT / OT environments, deploying, configuring, and supporting IT / OT cybersecurity solutions across industrial systems and critical infrastructure.
• Proven experience performing cybersecurity risk assessments across IT / OT environments, including identification of threats, vulnerabilities, and operational impacts.
• Understanding of security testing methodologies, including white box, grey box, and controlled (non-disruptive) assessment approaches in IT / OT environments.
• Strong knowledge of cyber threats, attack vectors, exploits, and adversary tactics, techniques, and procedures (TTPs), with the ability to apply this knowledge to real-world scenarios.
• Experience in purple team or security validation activities, including simulating attack scenarios in a controlled manner to validate security controls, detection capabilities, and response effectiveness.
• Ability to analyse network traffic and host-based data (e.g., logs, packet captures, system configurations) to identify anomalies, security events, and potential attack paths.
• Strong understanding of networking fundamentals, including routing, switching, VLANs, segmentation, and secure network design for IT / OT environments.
• Experience supporting or participating in incident response activities and tabletop exercises, helping validate readiness and improve coordination across teams.
• Knowledge and Experience in one or more of the following areas: Building Management Systems (BMS), Electrical Power Monitoring Systems (EPMS), SCADA platforms, PLC platforms, Industrial Protocols, Passive OT monitoring solutions, Firewalls, Network infrastructure, SIEM, SOAR, and XDR platforms, Log analysis.

Tech Stack

• Cyber Security
• Firewalls
• Switching

Benefits

• Comprehensive suite of health and welfare, retirement, and paid leave benefits exceeding local expectations.
• Array of benefits, recognition, training, and development opportunities.
• Above market total compensation package.