Penetration Testing Engineer, MTS

This is a fully remote position, open to applicants in California, +2 more states.

📋 Description

• Conduct penetration tests on web applications, APIs, and cloud/hybrid infrastructures, including Kubernetes and Docker, as well as identity and trust boundaries, and AI/ML-enabled systems.

• Assess AI/ML systems for prompt injection vulnerabilities and potential abuse of AI integrations.

• Execute manual exploitation beyond automated tools, focusing on business logic exploitation, privilege escalation, and abuse of identity/access trust relationships.

• Provide support for engagements through scoping, execution, risk assessment, and detailed reporting with guidance for remediation.

• Create comprehensive technical reports detailing exploitation paths, absent security controls, and recommendations for mitigation.

• Collaborate with engineering, AppSec, and Detection & Response teams regarding findings.

• Operate under the supervision of senior team members during complex engagements.

• Enhance skills across cloud, identity, and AI/ML attack surfaces.

⛳️ Requirements

• 2-4 years of practical experience in penetration testing, offensive security, or application security testing.

• Proven experience in conducting penetration testing engagements within production or production-like environments.

• Proficiency in both manual techniques and automation/AI tools.

• Knowledge of application security vulnerabilities and their respective attack chains.

• Familiarity with identity and access control weaknesses.

• Understanding of the fundamentals of cloud security.

• Awareness of security risks associated with AI and LLM-based systems.

• Capability to effectively communicate exploitation mechanics, impact, and actionable remediation steps to engineers and security teams.

• Experience in developing custom scripts, payloads, or proofs of concept is an advantage.

• Involvement in Bug Bounty programs is a plus.

• Understanding of cloud architectures and identity-centric security models is beneficial.

• Experience utilizing AI/LLMs for offensive security operations or vulnerability discovery is a plus.

🏝️ Benefits

• Time off programs

• Medical insurance

• Dental insurance

• Vision insurance

• Mental health support

• Paid parental leave

• Life insurance

• Disability insurance

• 401(k)

• Employee stock purchasing program

• Incentive compensation may be available for certain roles

• Equity may be available for certain roles

• Reasonable accommodations during the application or recruiting process