OT-Security Consultant / Penetration Tester (m/w/d)

Responsibilities

We are representing a confidential German cybersecurity consultancy specializing in operational technology and critical infrastructure protection. In this role, you will conduct penetration tests and security assessments in OT and industrial control system environments, including SCADA systems, remote terminal units, intelligent electronic devices, protective relays, human-machine interfaces, engineering workstations, and programmable logic controllers such as Siemens S7-series devices. You will also assess IT/OT transition points.

You will analyze industrial protocols including IEC 61850 (GOOSE, MMS, Sampled Values), IEC 60870-5-104, Modbus TCP, S7comm and S7commPlus, and PROFINET. A significant portion of your work involves reconstructing attack paths in a physical OT laboratory environment and validating them before any production system testing occurs.

You will coordinate scope, safety requirements, and testing windows directly with facility operators. Documentation is a core responsibility: you will record findings with reproducible steps, assess risks using CVSS and IEC 62443-3-3 frameworks, and recommend hardening measures that operators can realistically implement. You will present results to client operations teams, provide detection ideas for SOC and SIEM integration, and facilitate knowledge transfer.

You will contribute to ongoing research projects focused on OT security and help develop testing methodologies and tooling. If interested, you may participate in publications and responsible disclosures.

What We're Looking For

You must have several years of penetration testing experience with a demonstrable portion in OT or ICS environments. Practical hands-on experience with at least one of the industrial protocols listed above is required, beyond simply operating existing tools.

You understand the operational reality of OT environments: why availability takes precedence over confidentiality, how to work within maintenance windows, and when certain systems must not be touched. You write reports that both a plant manager and a CISO can read and act upon.

Very strong German language skills (minimum C1 level) and solid English proficiency are required. You work in a structured and analytical manner, take ownership of your assignments, and demonstrate motivation, reliability, and initiative.

Preferred qualifications include:

• OT/ICS certifications or operational technology background
• Experience in the energy sector or rail industry
• Custom tool development, security research, responsible disclosures, or publications
• Detection engineering experience including SIEM rule development and anomaly detection for industrial protocols

This position is based in Dortmund with primarily remote work from anywhere in Germany. On-site presence is required for client engagements and laboratory work. Flexible working hours are standard.

How We Work With You

Candidates apply directly through Get A Job.ai. Our recruiting team will conduct an initial screening to understand your background and technical experience. We then present qualified candidates to our client for their consideration. Please do not attempt to contact the client directly, as all communication is managed through our talent team to ensure a professional and coordinated process.

Pay

Compensation details will be discussed during the screening process based on your experience level and qualifications.

Equal Opportunity: Get A Job.ai is committed to inclusive recruiting practices and welcomes applications from all qualified candidates regardless of background.