Senior Penetration Tester

Job Description: - Conduct manual penetration tests against company systems

• Build AI-assisted tooling and automation to expand penetration-test coverage
• Define and implement testing approaches for LLM applications, agents, and agent-generated code
• Triage SAST findings, remediate real vulnerabilities, and tune false-positive rules
• Perform secure code reviews across web applications, APIs, and AWS infrastructure
• Build tooling and security services within the Forward application stack
• Support test-to-production security reviews for AI-built work
• Explain risk and priorities to security and software engineers
• Help establish standards for the company's growing security function and AI security testing program

Requirements: - 5+ years in application security, offensive security, or product security

• Hands-on pentesting and code-review depth across web applications, APIs, and cloud infrastructure (AWS)
• A hacker mentality and curiosity about how systems break
• Interest in using AI to solve problems
• Understanding of AI/LLM attack surface, including prompt injection, insecure agent tool use, and vulnerabilities characteristic of AI-generated code
• Experience with modern programming languages such as Ruby, Python, TypeScript, or Go
• Experience with secure SDLC practices
• Ability to communicate risk and priorities to security and software engineers
• Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience
• OSCP/OSWE or comparable offensive certifications is nice to have
• Experience pentesting or red-teaming LLM applications and agentic systems is nice to have
• Experience contributing to bug-bounty or external testing programs is nice to have
• Background in fintech or other regulated environments is nice to have
• Must be authorized to work for any employer in the United States
• Must answer whether current or future sponsorship will be required

Benefits: - Medical insurance

• Dental insurance
• Vision insurance
• Commuter benefits
• Flexible time-off policy
• Paid parental leave
• 401k match for US employees
• Wellness reimbursement
• Volunteering days
• Annual professional development budget
• Charitable donation match
• Flexible working arrangements: work from home, in the office, or a combination of both
• Flexible hours
• Virtual and in-person team events and celebrations
• 10% annual target bonus