Overview

Job Description: Role summary We are seeking a highly skilled Security Engineer specializing in Penetration Testing to strengthen our o ensive security capabilities. This role is responsible for identifying vulnerabilities across applications, infrastructure, cloud environments, and emerging AI/ML systems, including Large Language Models (LLMs) and GenAI platforms. The ideal candidate combines deep technical pentesting expertise with hands-on experience in AI security, enabling proactive defense against sophisticated and evolving threats. Key Responsibilities: Application & API Security Testing Perform black-box, gray-box, and white-box penetration testing of: Web applications, APIs (REST/GraphQL), and mobile platforms • Identify vulnerabilities including: Authentication/authorization flaws Injection attacks Business logic vulnerabilities Session Management Information Gathering Data Validation, Governance and Transfer Configuration Management • Conduct secure code reviews and validate SAST/DAST findings Infrastructure & Network Penetration Testing • Execute penetration testing across: Enterprise networks (internal/external) Cloud platforms (AWS, Azure, GCP) Hybrid environments • Perform: Privilege escalation and lateral movement Active Directory assessments (Kerberos, NTLM, etc.) • Identify misconfigurations and control weaknesses AI/ML & GenAI Security Testing • Conduct security assessments on: LLM-based applications and AI copilots Machine learning models and pipelines • Perform: Prompt injection and jailbreak testing Data leakage and model abuse scenarios Adversarial ML attacks (evasion, poisoning) • Assess: RAG (Retrieval-Augmented Generation) pipelines Model APIs, plugins, and agent frameworks E ectiveness of AI guardrails and controls Red Teaming & Adversary Simulation • Simulate real-world attack scenarios across: Applications, infrastructure, and AI systems • Develop multi-stage attack chains combining: Traditional and AI-specific techniques • Support purple team exercises with SOC and detection teams Automation & AI-Driven Security Testing • Leverage AI tools to: Automate vulnerability discovery Generate test cases and attack payloads Develop custom tools/scripts using: Python, Bash, PowerShell, or Go • Enhance scalability and repeatability of pentesting processes Reporting & Stakeholder Engagement • Deliver: Executive-level summaries (CIO/CISO ready) Detailed technical reports with reproduction steps • Provide: Risk-based prioritization aligned to business impact Actionable remediation guide • Collaborate with: Engineering, Cloud, SOC, and DevOps teamsRequired Qualifications Experience • 5+ years in penetration testing, red teaming, or offensive security • Proven experience testing: Web applications, APIs, and infrastructure • Hands-on exposure to cloud security and enterprise environments Technical Skills • Strong knowledge of: OWASP Top 10 / API Top 10 OWASP Top 10 LLM Network and infrastructure pentesting Identity and Active Directory exploitation • Experience with tools such as: Burp Suite, Metasploit, Nmap BloodHound, Mimikatz, NessusAI Security • Understanding of: LLM architectures and GenAI use cases RAG pipelines, embeddings, and vector databases• Experience with: Prompt injection testing AI red teaming or model security assessments• Exposure to: LangChain, Semantic Kernel, or similar frameworksProgramming • Proficiency in: Python (required) Scripting (Bash/PowerShell)• Ability to develop: Custom testing tools and exploit scriptsPreferred Qualifications • Certifications: OSCP, OSEP, or OSCE GPEN, GWAPT, or CRTO Cloud security certifications (AWS/Azure)• Experience with: AI security research or tooling Bug bounty programs or red team operationsKey Competencies Strong attacker mindset and creative problem solving Ability to translate technical findings into business risk Excellent collaboration across engineering and security teams Focus on scalable, repe