Description

You will own offensive security capabilities, identifying vulnerabilities across applications, infrastructure, cloud environments, and emerging AI/ML systems including Large Language Models (LLMs) and GenAI platforms.

This role is on-site.

Responsibilities

• Perform black-box, gray-box, and white-box penetration testing of web applications, APIs (REST/GraphQL), and mobile platforms.
• Execute infrastructure and network penetration testing across enterprise networks, hybrid environments, and cloud platforms (AWS, Azure, GCP).
• Conduct security assessments on LLM-based applications, AI copilots, and RAG pipelines, including prompt injection and adversarial ML attacks.
• Simulate real-world attack scenarios, developing multi-stage attack chains and supporting purple team exercises with SOC teams.
• Deliver executive-level summaries and detailed technical reports with risk-based prioritization and actionable remediation guidance.

Required Skills

• 5+ years in penetration testing, red teaming, or offensive security.
• Proficiency in Python, Bash, and PowerShell for custom tooling and scripting.
• Strong knowledge of OWASP Top 10, API Top 10, and identity/exploitation techniques (Kerberos, NTLM).
• Hands-on experience with security tools: Burp Suite, Metasploit, Nmap, BloodHound, Mimikatz, Nessus.
• Understanding of LLM architectures, GenAI use cases, embeddings, and vector databases.
• Experience with AI security frameworks such as LangChain or Semantic Kernel.
• Cloud security experience across AWS, Azure, and GCP.

Preferred Skills

• Certifications: OSCP, OSEP, OSCE, GPEN, GWAPT, or CRTO.
• Experience with AI security research, bug bounty programs, or red team operations.

Key Skills

Education

Bachelor's degree