Ethical Hacker - OT Security Consultant

What you’ll be doing

• Security Architecture Reviews
• Perform holistic tabletop reviews covering both technical and non-technical risk across OT environments, without engaging in high-risk manual or automated activity
• Analyze for areas of negative impact, high risk, and single points of failure (SPOF) within sensitive, legacy networks
• Apply structured judgment to identify where risk is concentrated and where controls are missing
• Adapt review depth and approach to the operational realities of each client environment

OT Risk Identification & Assessment

• Identify vulnerabilities and weaknesses across Operational Technology environments, including Industrial Control Systems (ICS), SCADA, and field devices
• Assess legacy and sensitive networks where conventional testing methods carry unacceptable operational risk
• Distinguish between theoretical and operationally relevant risk to keep findings actionable
• Prove impact where appropriate, exercising restraint where the environment demands it

Client Advisory & Program Improvement

• Support OT clients with security program improvements, identifying which critical controls are needed
• Refine testing scope collaboratively as engagements proceed and the environment becomes clearer
• Translate technical findings into guidance that clients can act on across both technical and leadership audiences
• Build client confidence through credibility, clear communication, and operational awareness

Methodology & Continuous Improvement

• Contribute to the maturity of Packetlabs' OT testing methodology and practice
• Stay current on OT threats, attack techniques, and defensive controls
• Share knowledge with the broader team to minimize blind spots and strengthen collective capability
• Help raise the standard of OT security work across the firm