Senior Penetration Testing Engineer

What you'll do

• Plan and execute manual penetration tests against cloud infrastructure, APIs, and applications in regulated industries.
• Test LLM-powered applications for prompt injection, jailbreaks, and sensitive data leakage.
• Assess the security of AI agents and MCP servers regarding permissions, authentication, and trust boundaries.
• Evaluate AI supply chains, including RAG data sources, vector stores, and poisoned training data.
• Chain security findings across multiple layers into realistic attack paths to demonstrate business impact.
• Use AI agents to automate reconnaissance, triage, and regression testing processes.
• Translate new attack research into team guidance, training, and security awareness materials.

What we're looking for

• Master's Degree in Statistics, Mathematics, Computer Science, or related field and 3+ years of experience in security or related field.
• Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field and 4+ years of experience in security or related field.
• Equivalent experience to the degree and years of experience requirements.
• Ability to pass the Microsoft Cloud background check.
• 5+ years of hands-on penetration testing or red teaming across cloud, web, API, identity, and network (preferred).
• Hands-on experience assessing LLM applications or AI agents using OWASP LLM Top 10, OWASP Agentic AI guidance, and MITRE ATLAS (preferred).
• Strong coding in Python plus one or more of C#, Go, PowerShell, JavaScript/TypeScript, or Rust (preferred).
• Certifications such as OSCP, OSEP, GPEN, GWAPT, or GXPN, and AI-security credentials (preferred).