Red Team Operator, Operational Technology

🕒 July 28

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👻 Ghost score 23%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Armadin

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Armadin is a cybersecurity platform company that uses agentic artificial intelligence and human red-team expertise to continuously simulate attacks, expose exploitable risk, and drive automated remediation. Its “Ultimate Attacker” offering provides continuous, agentic red teaming and remediation across an organization’s attack surface, combining multi-modal AI-driven attack capability with elite offensive-security experts and built-in safety/privacy controls. Armadin positions itself for large, complex enterprise environments (including Fortune 100 customers) and focuses on helping organizations stay ahead of machine-speed, AI-enabled threats.

📋 Description

• Execute semi-automated and manual red team and penetration testing on sensitive OT environments (e.g., ICS, SCADA, DCS, BMS, IIoT, Embedded Systems) where autonomous testing requires expert human oversight to maintain safety and uptime. • Identify and exploit weaknesses across diverse attack surfaces: • Understanding of OT services and protocols • Understanding and able to execute common Active Directory attacks that would allow lateral movement and privilege escalation • Ability to target controls systems and embedded devices for attack activities and abuse opportunities • Moderate understanding of container technologies and attack techniques to abuse these technologies • Certificate services and PKI infrastructure abuse • Knowledge of trust relationship attacks forest trusts • Conduct privilege escalation, lateral movement, and post-exploitation activities • Ability to customize public offensive tooling or develop custom internal tooling • Maintain operational security throughout engagements: • Deploy and operate command-and-control infrastructure (Cobalt Strike, Sliver, Mythic, custom frameworks) • Implement evasion techniques against EDR, SIEM, and network monitoring • Practice proper OPSEC including infrastructure isolation and attribution management • Demonstrate operational discipline, including scope control, cleanup, and evidence handling • Develop proof-of-concept exploits and tooling as needed to achieve objectives • Produce clear, actionable reports that communicate risk and business impact • Present findings to technical teams and executive stakeholders • Contribute to internal research, tooling, playbooks, and knowledge sharing • Define the reasoning paths, safety guardrails, and protocol-specific logic our AI uses to navigate industrial networks. • Act as the ultimate safety valve, defining the "No-Go" parameters for autonomous agents in volatile manufacturing or utility environments. • Work with client engineers and our internal AI teams to translate validated OT kill chains into autonomous defensive postures.

🎯 Requirements

• Ability to clearly communicate with OT stakeholders in a manner that builds relationships and trust. • Demonstrated experience in offensive security with a focus on OT/ICS/SCADA/Embedded Systems. You should know your way around automation and control systems as well as a Linux terminal. • You understand that while AI provides scale, human expertise is required to navigate the nuance of a sensitive power grid or production line. • Deep technical knowledge of industrial protocols (Modbus, DNP3, Ethernet/IP, Profinet) and the ability to perform manual packet manipulation. • Deep understanding of networking and operating system fundamentals • Strong knowledge of common enterprise protocols and services (e.g., SMB, LDAP, Kerberos, DNS, HTTP) • Scripting or programming experience in at least one language (e.g., Python, Go, PowerShell, Bash, C/C++); • Ability to quantify "exploitable risk" vs. "theoretical vulnerability" in a way that resonates with both plant managers and CISOs. • Ability to analyze attack paths and chain multiple weaknesses into meaningful outcomes • Strong technical writing and communication skills • Eligibility to work in the United States without sponsorship.

🏖️ Benefits

• Full Health, Dental, & Vision Coverage • Meaningful Equity Ownership • In-Office Meals • Haircuts at the Office • Company Sponsored Conferences & Events • 401(k), HSA, and FSA Plans • Flexible PTO