Red Team Operator, Operational Technology

🕒 July 28

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👻 Ghost score 65%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Armadin

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Armadin is a cybersecurity platform company that uses agentic artificial intelligence and human red-team expertise to continuously simulate attacks, expose exploitable risk, and drive automated remediation. Its “Ultimate Attacker” offering provides continuous, agentic red teaming and remediation across an organization’s attack surface, combining multi-modal AI-driven attack capability with elite offensive-security experts and built-in safety/privacy controls. Armadin positions itself for large, complex enterprise environments (including Fortune 100 customers) and focuses on helping organizations stay ahead of machine-speed, AI-enabled threats.

📋 Description

• Plan and execute semi-automated and manual red team operations across sensitive OT environments including ICS, SCADA, DCS, BMS, IIoT, and embedded systems • Identify and exploit weaknesses across converged IT, network, application, and OT layers • Exploit OT services and industrial protocols, Active Directory, OT software, engineering workstations, embedded web applications, management APIs, containers, virtualization, edge computing, certificate services, PKI, firewalls, VPNs, and jump boxes • Conduct stealthy lateral movement, privilege escalation, and persistence while evading EDR, SIEM, and network monitoring across segmented zones • Deploy and operate covert C2 infrastructure using Cobalt Strike, Sliver, Mythic, and custom frameworks • Develop scripts, proof-of-concept exploits, and custom plugins in Python, PowerShell, Go, C/C++, and other languages • Maintain strict scope adherence, cleanup, evidence handling, and time management across concurrent engagements • Produce technical reports and present findings to plant managers, engineering teams, CISOs, and executive leadership • Define reasoning paths, protocol logic, and strict No-Go parameters for AI models operating in sensitive industrial networks • Partner with engineers and researchers to define, build, and test adversarial evaluations • Translate engagement outcomes, kill chains, privilege escalation techniques, and operational tradecraft into structured inputs for AI training and validation

🎯 Requirements

• Hands-on experience in offensive security with a primary focus on OT/ICS/SCADA • Strong competency in network or application penetration testing • Technical knowledge of Modbus, DNP3, EtherNet/IP, Profinet, and OPC UA • Ability to perform manual packet manipulation, traffic analysis, and firmware/embedded software assessments • Hands-on experience in at least one of network and Active Directory security, application security, or systems and automation • Experience with enterprise network exploitation and Active Directory kill chains, or web application security testing, or Linux/Windows systems and offensive scripting/programming • Ability to quantify exploitability and impact while balancing cyber risk with operational safety and uptime • Exceptional technical writing and verbal communication skills • Must be eligible to work in the United States without sponsorship • GICSP, GRID, GCIP, OSCP, OSEP, CRTO/CRTE, CPTS, PNPT, GWAPT, eWPTXv2, OSWE, CWES, or TCM Practical Web/Mobile Pentest certifications are additional preferred qualifications • Specialized experience in mobile application testing, source code reviews, reverse engineering, embedded device testing, encryption/decryption, packet analysis, or covert communication channels is an additional qualification • Experience developing custom C2 modules/extensions or interest/experience applying LLMs and agentic AI workflows to offensive security operations is an additional qualification • Prior experience within specialized government offensive units, top-tier offensive security consultancies, or Fortune 500 red teams with OT scope is an additional qualification

🏖️ Benefits

• Full Health, Dental, & Vision Coverage • Meaningful Equity Ownership • In-Office Meals • Haircuts at the Office • Company Sponsored Conferences & Events • 401(k), HSA, and FSA Plans • Flexible PTO