Role Summary:

We are seeking an experienced and driven Senior Penetration Tester to lead complex security assurance engagements, perform advanced offensive security assessments, and help shape our long-term testing strategies.

In this role, you will be instrumental in mentoring team members and strengthening our security posture across multi-faceted environments, including modern web and mobile apps, complex infrastructure, cloud ecosystems, and emerging AI/ML systems.

Key Responsibilities:

- Offensive Security & Execution: Lead and independently execute highly technical penetration testing and advanced security assurance engagements.

- Methodology & Strategy: Design, implement, and optimize cutting-edge penetration testing methodologies aligned with business objectives.

- Contribute to the mid- and long-term Security Assurance strategy.

Specialized Testing Domains:

- Web Application & API Security Testing

- Mobile Application Security Testing (iOS/Android)

- Infrastructure & Cloud Security Testing (AWS/Azure/GCP)

- Purple Team Assessments

AI/ML & LLM Security:

- Assess AI-powered systems, Large Language Models (LLMs), and AI-assisted developer tools.

- Identify AI-specific vectors such as prompt injection, data poisoning, and model abuse.

Threat Modeling & Risk:

- Perform expert-level threat modeling and provide robust, actionable remediation guidance balancing risk, technical landscape, and business roadmaps.

Vendor & Stakeholder Management:

- Manage third-party penetration testing vendors, optimize engagement value/budgets, and bridge communication between technical teams and executive stakeholders.

Leadership & Mentorship:

- Mentor junior and mid-level security engineers, identify capability gaps, and conduct enablement training for developers on modern vulnerability identification.

Required Technical & Soft Expertise:

- Advanced Offensive Tactics: Threat modeling, web/API, mobile, cloud/infrastructure pentesting, and purple teaming.

- Emerging Technologies: Proven understanding or hands-on experience in AI/ML security and LLM vulnerability assessment.

- Leadership & Strategy: Demonstrated experience in security strategy, defining testing standards, and mentoring technical teams.

- Communication: Excellent technical report writing and executive-level risk communication capabilities.

Preferred Qualifications:

- Extensive hands-on background in offensive security, vulnerability management, and security assurance within fast-paced enterprise environments.

- Industry-recognized certifications (e.g., OSCP, OSCE, GPEN, GWAPT, CISSP) are a strong plus.

- Exceptional stakeholder management skills with a collaborative approach to cross-functional security initiatives.