AI PEN Tester

Title: AI PEN Tester

Location: USA (Remote)

Duration: 06+ Month contract role

Key Responsibilities

• Minimum 3+ years of experience in conducting penetration testing and vulnerability assessments.
• Experience testing web applications, APIs, networks, and cloud environments.
• Hands-on experience with industry-standard security testing tools and exploit frameworks.
• Experience identifying, validating, and documenting security vulnerabilities.
• Exposure to secure coding practices and application security concepts.
• Experience preparing security assessment reports and presenting findings to stakeholders.
• Understanding of cybersecurity threats, attack methodologies, and defense mechanisms.
• Relevant certifications such as CEH, OSCP, GPEN, and PNPT are preferred.
• Web Application Penetration Testing (OWASP Top 10) API Security Testing and Network Penetration Testing, Vulnerability Assessment & Management Cloud Security Testing (AWS/Azure/GCP) Mobile Application Security Testing (Android/iOS) Active Directory Security Assessment Security Risk Assessment and Threat Analysis Burp Suite Professional, OWASP ZAP, Metasploit Nessus, Qualys, Nmap, Wireshark Kali Linux and Security Toolsets Python, PowerShell, Bash/Shell Scripting Understanding of Security Frameworks (OWASP, PTES, NIST) Security Reporting and Remediation Recommendations Knowledge of Compliance Standards (ISO 27001, PCI-DSS, SOC2)
• Ability to assess prompt injection, insecure model/application interactions, sensitive information exposure, excessive agency and other LLM application risks
• Ability to identify attack surfaces across models, data, applications, APIs, RAG pipelines and agents using frameworks such as MITRE ATLAS
• Ability to use approved LLM/AI tools for test-case generation, reconnaissance analysis, vulnerability analysis, scripting and report generation

Roles and Responsibilities:

• Uses AI/GenAI to accelerate penetration-testing activities, such as reconnaissance, test-case generation, analysis, scripting, and reporting.
• Conduct security testing of web applications, APIs, networks, cloud environments, and systems.
• Identify, validate, and document security vulnerabilities and weaknesses.
• Perform controlled exploitation to assess the impact and risk of vulnerabilities.
• Execute vulnerability assessments using manual and automated testing tools.
• Prepare detailed security assessment reports with remediation recommendations.
• Collaborate with development and infrastructure teams to resolve security issues.
• Conduct security reviews to ensure compliance with organizational and industry standards.
• Support secure software development and security best practices