Security Engineer - Pentesting

Required Qualifications Experience * 5+ years in penetration testing, red teaming, or offensive security * Proven experience testing: Web applications, APIs, and infrastructure * Hands-on exposure to cloud security and enterprise environments Technical Skills * Strong knowledge of: OWASP Top 10 / API Top 10 OWASP Top 10 LLM Network and infrastructure pentesting Identity and Active Directory exploitation * Experience with tools such as: Burp Suite, Metasploit, Nmap BloodHound, Mimikatz, Nessus AI Security * Understanding of: LLM architectures and GenAI use cases RAG pipelines, embeddings, and vector databases * Experience with: Prompt injection testing AI red teaming or model security assessments * Exposure to: LangChain, Semantic Kernel, or similar frameworks Programming * Proficiency in: Python (required) Scripting (Bash/PowerShell) * Ability to develop: Custom testing tools and exploit scripts Preferred Qualifications * Certifications: OSCP, OSEP, or OSCE GPEN, GWAPT, or CRTO Cloud security certifications (AWS/Azure) * Experience with: AI security research or tooling Bug bounty programs or red team operations Key Competencies Strong attacker mindset and creative problem-solving Ability to translate technical findings into business risk Excellent collaboration across engineering and security teams Focus on scalable, repeatable security processes