Penetration Tester (AI-Enabled)

Hands-on experience with AI-enabled penetration testing.

Ability to assess prompt injection, insecure model/application interactions, sensitive information exposure, excessive agency, and other LLM application risks.

Ability to identify attack surfaces across models, data, applications, APIs, RAG pipelines, and AI agents using frameworks such as MITRE ATLAS.

Experience using approved LLM/AI tools for test-case generation, reconnaissance analysis, vulnerability analysis, scripting, and report generation.

Minimum 3+ years of experience in penetration testing and vulnerability assessments.

Experience testing web applications, APIs, networks, and cloud environments.

Hands-on experience with industry-standard security testing tools and exploit frameworks.

Ability to identify, validate, document, and remediate security vulnerabilities.

Knowledge of secure coding practices and application security concepts.

Experience preparing security assessment reports and presenting findings to stakeholders.

Understanding of cybersecurity threats, attack methodologies, and defense mechanisms.

Certifications such as CEH, OSCP, GPEN, or PNPT are preferred.

Web Application Penetration Testing (OWASP Top 10)

API Security Testing and Network Penetration Testing

Vulnerability Assessment and Management

Cloud Security Testing (AWS, Azure, or GCP)

Mobile Application Security Testing (Android/iOS)

Active Directory Security Assessments

Security Risk Assessment and Threat Analysis

Security Tools: Burp Suite Professional, OWASP ZAP, Metasploit, Nessus, Qualys, Nmap, Wireshark, and Kali Linux

Scripting: Python, PowerShell, and Bash/Shell

Security Frameworks: OWASP, PTES, and NIST

Security Reporting and Remediation Recommendations

Compliance Standards: ISO 27001, PCI-DSS, and SOC 2