OT Penetration Tester - Wireless (GSM / RF Mesh)

Role OverviewWe are looking for a highly specialised OT Penetration Tester with strong experience in wireless communication networks (GSM and RF Mesh) within AMI / Smart Metering environments.This role focuses on black-box security testing of OT networks, validating communication flows, resilience, and protocol-level vulnerabilities across large-scale distributed infrastructure.Key Responsibilities1. Wireless OT Penetration Testing (Core)Perform black-box penetration testing on RF Mesh and private GSM networks in AMI environmentsSimulate real-world attack scenarios without access to internal system logicTest communication between smart meters, concentrators, and head-end systems2. Functional & Protocol ValidationValidate input/output behaviour using:Meter readingsCommandsAlerts / alarmsVerify expected responses such as:Data acknowledgementsError handlingWork with protocols:DLMS/COSEMWireless M-Bus3. Network Resilience & Interference TestingSimulate:Signal jammingNode failurePacket loss scenariosAssess:Network recoveryData integrityStability of multi-hop RF mesh networksWork across frequency bands like:902–928 MHz (RF Mesh)GSM spectrum4. Security & Data Transmission TestingAnalyse encrypted communication flows (without decryption)Identify vulnerabilities in:AuthenticationData integrityTransmission securityEnsure compliance with OT communication standards5. Performance & Scalability TestingConduct stress testing for:High-volume meter data transmissionLarge-scale AMI deploymentsEvaluate:LatencyThroughputNetwork congestion handlingMandatory Skills (Non-Negotiable)Strong experience in OT Security / IC S environmentsHands‑on wireless penetration testing (GSM / RF Mesh)Experience with AMI / Smart Metering systemsKnowledge of:DLMS/COSEM protocolWireless M-BusUnderstanding of:RF communication (frequency bands, interference, propagation)Mesh network architecture (multi‑hop networks)Good to HaveExperience with SCADA / IC S security testingKnowledge of IoT / embedded device securityFamiliarity with tools for RF analysis / wireless testing#J-18808-Ljbffr