Description

You will lead offensive security assessments across applications, infrastructure, and emerging AI systems.

This role is on-site.

Responsibilities

• Perform black-box, gray-box, and white-box penetration testing on web applications, REST/GraphQL APIs, and mobile platforms.
• Execute infrastructure and network penetration tests across AWS, Azure, and GCP environments, including Active Directory assessments.
• Conduct security assessments on LLM-based applications, RAG pipelines, and AI models, focusing on prompt injection and adversarial attacks.
• Develop custom testing tools and automation scripts in Python, Bash, or PowerShell to enhance pentesting scalability.
• Deliver detailed technical reports and executive summaries with actionable remediation guidance to engineering and security teams.

Required Skills

• 5+ years of experience in penetration testing, red teaming, or offensive security.
• Strong proficiency in Python, Bash, and PowerShell for tool development and automation.
• Deep knowledge of OWASP Top 10, API Top 10, and network/infrastructure exploitation techniques.
• Hands-on experience with Burp Suite, Metasploit, Nmap, BloodHound, Mimikatz, and Nessus.
• Understanding of LLM architectures, RAG pipelines, vector databases, and AI red teaming methodologies.
• Experience testing cloud platforms (AWS, Azure, GCP) and hybrid enterprise environments.

Preferred Skills

• OSCP, OSEP, OSCE, GPEN, GWAPT, or CRTO certifications.
• Cloud security certifications for AWS or Azure.

Key Skills

Education

Bachelor's degree