Principal Penetration Tester (OT Cybersecurity)

Location: United Kingdom; remote-first role with travel of up to 30–40% domestically and internationally for customer engagements.

Salary: £105,000; competitive equity package and comprehensive benefits plan.

Company

hirify.global provides xOT cybersecurity technology, threat intelligence, and expert services for critical infrastructure, including energy, water, healthcare, and manufacturing.

What you will do

• Lead complex industrial penetration testing, purple teaming, and vulnerability assessment engagements as the primary technical lead and trusted advisor.
• Define OT penetration testing methodologies, assessment frameworks, red team tactics, and threat-informed adversary emulation campaigns.
• Identify attack paths across IT/OT boundaries and industrial environments through hands-on exploitation and technical analysis.
• Translate findings into remediation guidance and strategic priorities for proprietary tools, behavioral analytics, and detection content.
• Engage executives, boards, customers, and technical leaders with risk prioritization, presentations, and remediation recommendations.
• Represent hirify.global through research, conference presentations, whitepapers, public engagements, and cross-functional mentoring.

Requirements

• 8+ years of hands-on cybersecurity experience in OT vulnerability assessment, penetration testing, or red teaming, including white-, gray-, and black-box methodologies.
• Deep knowledge of OT architectures and services, including DCS, historians, SCADA networks, transmission and distribution management, AMI, communication protocols, and other control systems.
• Extensive knowledge of OT cyber threats, attack paths, exploits, and adversary TTPs.
• Hands-on experience with Metasploit, Nmap, Kali Linux, Cobalt Strike, Burp Suite, common living-off-the-land toolsets, and C2 frameworks.
• Advanced networking experience with routers, switches, load balancers, and firewalls, including analysis of network traffic and host data in a cybersecurity context.
• Proven experience using large language models such as Claude for reconnaissance, exploit development, penetration testing execution, and reporting, with the judgment to validate AI-generated output and securely handle client data.
• Strong report-writing and presentation skills for technical and non-technical audiences.
• Ability to work independently in a remote environment and coordinate across distributed teams.

Culture & Benefits

• Remote-first, mission-driven work focused on protecting critical infrastructure.
• Collaboration across North America, Europe, the Middle East, and APAC, with an emphasis on authenticity, transparency, and trust.
• Competitive equity package and comprehensive benefits plan.
• Background check required for all new hires.