AVP Penetration Tester

What you'll do

• Perform manual penetration testing on LLMs, agentic applications, and supporting APIs to identify security vulnerabilities.
• Conduct tactical assessments against OWASP Top 10 threats for internal and external networks, infrastructure, and cloud environments.
• Develop and modify custom tools and scripts using AI models like Claude to automate and enhance pentesting capabilities.
• Partner with product stakeholders during the SDLC to provide security recommendations for AI applications before production deployment.
• Document findings, assign risk ratings, and provide clear remediation guidance to technical and non-technical stakeholders.
• Monitor emerging threats, zero-day vulnerabilities, and new tactics specifically targeting agentic systems and infrastructure.
• Lead end-to-end penetration testing initiatives and communicate project status and results to senior leadership.
• Perform retesting to validate the successful closure of identified security findings.

What we're looking for

• 5+ years of experience conducting application/API and network-based penetration testing engagements.
• 5+ years of experience troubleshooting tools, finding issues in code, and rewriting code to remove bugs.
• 3+ years of experience leading penetration testing engagements end-to-end.
• 2+ years of experience pentesting AI/LLM/GenAI applications.
• 2+ years of experience using AI models like Claude to develop tooling.
• Must possess at least one industry certification such as OSCP, OSAI, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN.
• Advanced knowledge of security tools (Burp Suite, Metasploit, etc.) and frameworks (OWASP Top 10 for LLM, MITRE ATT&CK).
• Bachelor’s Degree.