Senior Penetration Tester

This is a fully remote position, open to applicants in United States.

📋 Description

• Execute manual penetration tests on company systems.

• Develop AI-assisted tools and automation to broaden penetration testing coverage.

• Establish and apply testing strategies for LLM applications, agents, and code generated by agents.

• Assess SAST findings, address genuine vulnerabilities, and adjust false-positive criteria.

• Conduct secure code assessments for web applications, APIs, and AWS infrastructure.

• Create tools and security services within the Forward application stack.

• Assist with security evaluations from testing to production for AI-generated work.

• Communicate risks and priorities to security and software engineering teams.

• Aid in setting standards for the company's evolving security function and AI security testing initiative.

⛳️ Requirements

• Over 5 years of experience in application security, offensive security, or product security.

• Proficient in pentesting and code reviews across web applications, APIs, and cloud infrastructure (AWS).

• Possess a hacker mindset and an inquisitive nature regarding system vulnerabilities.

• Demonstrated interest in leveraging AI to address challenges.

• Familiarity with the AI/LLM attack surface, including prompt injection, improper agent tool usage, and vulnerabilities typical of AI-generated code.

• Experience with contemporary programming languages such as Ruby, Python, TypeScript, or Go.

• Knowledge of secure SDLC methodologies.

• Capability to convey risk and priorities to security and software engineering personnel.

• Generally holds a Bachelor's Degree in Computer Science or a related technical field, or possesses equivalent industry experience.

• OSCP/OSWE or similar offensive certifications are a plus.

• Experience in pentesting or red teaming LLM applications and agentic systems is advantageous.

• Participation in bug bounty or external testing initiatives is a bonus.

• Experience in fintech or other regulated sectors is beneficial.

• Must be eligible to work for any employer in the United States.

• Must indicate if current or future sponsorship will be necessary.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Commuter benefits.

• Flexible time-off policy.

• Paid parental leave.

• 401k matching for US employees.

• Wellness reimbursement.

• Volunteering days.

• Annual professional development budget.

• Charitable donation matching.

• Flexible working arrangements: options to work from home, in the office, or a combination of both.

• Flexible hours.

• Virtual and in-person team events and celebrations.

• 10% annual target bonus.