OT Penetration Tester - Wireless (GSM / RF Mesh)

Role OverviewWe are looking for a highly specialised OT Penetration Tester with strong experience in wireless communication networks (GSM and RF Mesh) within AMI / Smart Metering environments.This role focuses on black-box security testing of OT networks, validating communication flows, resilience, and protocol-level vulnerabilities across large-scale distributed infrastructure.Key ResponsibilitiesWireless OT Penetration Testing (Core): Perform black-box penetration testing on RF Mesh and private GSM networks in AMI environments. Simulate real-world attack scenarios without access to internal system logic. Test communication between smart meters, concentrators, and head‑end systems.Functional & Protocol Validation: Validate input/output behaviour using meter readings, commands, alerts/alarms. Verify expected responses such as data acknowledgements, error handling. Work with protocols: DLMS/COSEM, Wireless M-Bus.Network Resilience & Interference Testing: Simulate signal jamming, node failure, packet loss scenarios. Assess network recovery, data integrity, stability of multi-hop RF mesh networks. Work across frequency bands such as 902–928 MHz (RF Mesh) and GSM spectrum.Security & Data Transmission Testing: Analyse encrypted communication flows (without decryption). Identify vulnerabilities in authentication, data integrity, transmission security. Ensure compliance with OT communication standards.Performance & Scalability Testing: Conduct stress testing for high-volume meter data transmission and large-scale AMI deployments. Evaluate latency, throughput, network congestion handling.Mandatory Skills (Non‑Negotiable)Strong experience in OT Security / IC environments.Hands‑on wireless penetration testing (GSM / RF Mesh).Experience with AMI / Smart Metering systems.Knowledge of DLMS/COSEM protocol, Wireless M-Bus.Understanding of RF communication (frequency bands, interference, propagation). Mesh network architecture (multi-hop networks).Good to HaveExperience with SCADA / IC security testing.Knowledge of IoT / embedded device security.Familiarity with tools for RF analysis / wireless testing.#J-18808-Ljbffr