SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Armadin Security, founded by Kevin Mandia (founder of Mandiant, $5.4B exit to Google), is building autonomous proactive security systems powered by AI to defend critical infrastructure against increasingly sophisticated cyberattacks. The company brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT.
As an Operational Technology (OT) Red Team Operator, you will conduct adversary-focused offensive security operations in highly sensitive OT, Critical Infrastructure, and converged enterprise environments where precision and safety are paramount. You will work in complex, interconnected environments spanning enterprise networks, Active Directory, cloud systems, and specialized industrial control systems.
Key responsibilities include:
- Execute cyber-physical penetration tests across sensitive OT environments (ICS, SCADA, DCS, BMS, IIoT, embedded systems) using both manual and semi-automated techniques while maintaining safety and process integrity.
- Identify and exploit multi-domain attack surfaces across IT, network, application, and OT layers, including industrial protocols (Modbus, DNP3, EtherNet/IP, Profinet), Active Directory attacks, OT software applications, container technologies, and network perimeter controls.
- Conduct stealthy lateral movement, privilege escalation, and persistence activities while evading EDR, SIEM, and network monitoring solutions across segmented zones.
- Deploy and operate covert command-and-control infrastructure (Cobalt Strike, Sliver, Mythic, custom frameworks) with strict operational security and attribution management.
- Develop custom scripts, proof-of-concept exploits, and plugins (Python, PowerShell, Go, C/C++) to manipulate proprietary protocols, reverse engineer thick clients, and bypass specialized controls.
- Produce technical reports and present findings to plant managers, engineering teams, CISOs, and executives, articulating exploitable risk versus theoretical risk.
- Partner with internal engineers and researchers to define, build, and test adversarial evaluations that model real attacker behavior, translating engagement outcomes into structured inputs for AI training and validation.
- Define reasoning paths, protocol logic, and safety parameters for AI models operating in sensitive industrial networks.
Requirements:
- Hands-on offensive security experience with primary focus on OT/ICS/SCADA, combined with strong competency in network or application penetration testing.
- Technical knowledge of industrial protocols (Modbus, DNP3, EtherNet/IP, Profinet, OPC UA) and ability to perform manual packet manipulation, traffic analysis, and firmware/embedded software assessments.
- Hands-on experience in at least one of: (1) Network & Active Directory Security—enterprise network exploitation, Active Directory kill chains, network device manipulation, covert communication across segmented environments; or (2) Application Security—web application security testing (OWASP Top 10, business logic flaws, authentication/authorization bypass, injection attacks, API security).
- Strong operating system fundamentals (Linux, Windows) and proficiency in scripting/programming in at least one language (Python, Go, PowerShell, Bash, or C/C++).
- Ability to quantify exploitability and impact while balancing cyber risk with operational safety and uptime.
- Exceptional technical writing and verbal communication skills for both technical and executive audiences.
- Must be eligible to work in the United States without sponsorship.
Desirable qualifications:
- OT/ICS certifications: GICSP, GRID, GCIP, or equivalent.
- Specialized experience in mobile application testing, source code reviews, reverse engineering, embedded device testing, encryption/decryption, packet analysis, or covert communication channels.
- Network & offensive security certifications: OSCP, OSEP, CRTO/CRTE, CPTS, or PNPT.
- AppSec certifications: GWAPT, eWPTXv2, OSWE, CWES, or TCM Practical Web/Mobile Pentest.
- Experience developing custom C2 modules/extensions or interest in LLMs and agentic AI workflows for offensive security.
- Prior experience in specialized government offensive units, top-tier offensive security consultancies, or Fortune 500 red teams with OT scope.
