Red Team Operator, Operational Technology (OT)

About the role

At Armadin, we're a group of engineers, researchers, and hackers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on. We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite red teamers into purpose-built security models and agents that discover risk and remediate it before organizations are breached. Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, and MIT to reinvent security for an adversary that never sleeps.

Location: Remote in the United States.

Responsibilities

• Execute semi-automated and manual red team and penetration testing on sensitive OT environments (e.g., ICS, SCADA, DCS, BMS, IIoT, Embedded Systems) where autonomous testing requires expert human oversight to maintain safety and uptime.
• Identify and exploit weaknesses across diverse attack surfaces:
  • Understanding of OT services and protocols
  • Understanding and able to execute common Active Directory attacks that would allow lateral movement and privilege escalation
  • Ability to target controls systems and embedded devices for attack activities and abuse opportunities
  • Moderate understanding of container technologies and attack techniques to abuse these technologies
  • Certificate services and PKI infrastructure abuse
  • Knowledge of trust relationship attacks forest trusts
• Conduct privilege escalation, lateral movement, and post-exploitation activities
• Ability to customize public offensive tooling or develop custom internal tooling
• Maintain operational security throughout engagements:
  • Deploy and operate command-and-control infrastructure (Cobalt Strike, Sliver, Mythic, custom frameworks)
  • Implement evasion techniques against EDR, SIEM, and network monitoring
  • Practice proper OPSEC including infrastructure isolation and attribution management
  • Demonstrate operational discipline, including scope control, cleanup, and evidence handling
• Develop proof-of-concept exploits and tooling as needed to achieve objectives
• Produce clear, actionable reports that communicate risk and business impact
• Present findings to technical teams and executive stakeholders
• Contribute to internal research, tooling, playbooks, and knowledge sharing
• Define the reasoning paths, safety guardrails, and protocol-specific logic our AI uses to navigate industrial networks.
• Act as the ultimate safety valve, defining the "No-Go" parameters for autonomous agents in volatile manufacturing or utility environments.
• Work with client engineers