> Markdown version of [/jobs/ext/2694645-security-engineer-pentesting](https://www.wearedevelopers.com/jobs/ext/2694645-security-engineer-pentesting). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer Pentesting

- **Company:** Strategic Resources
- **Location:** San Jose, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Active Directory, Artificial Intelligence, Software System Penetration Testing, Burp Suite, Nmap, Open Web Application Security, Cloud Platform System, Large Language Models, Metasploit, Nessus, Machine Learning Operations
- **Published:** September 3, 2026
- **Apply:** https://www.dice.com/job-detail/d2d91fd8-9e46-45ad-9b78-3e3ebf6d5598

## About the Role

OWASP Top 10 LLM
*
Network and infrastructure pentesting
*
Identity and Active Directory exploitation

*
Experience with tools such as:

*
Burp Suite, Metasploit, Nmap
*
BloodHound, Mimikatz, Nessus

AI Security
*
Understanding of:

*
LLM architectures and GenAI use cases, Strong attacker mindset and creative problem solving
*
Ability to translate technical findings into business risk
*
Excellent collaboration across engineering and security teams
*
Focus on scalable, repeatable security processes

## Description

We are seeking a highly skilled Security Engineer specializing in Penetration Testing to strengthen our pensive security capabilities. This role is responsible for identifying vulnerabilities across applications, infrastructure, cloud environments, and emerging AI/ML systems, including Large Language Models (LLMs) and GenAI platforms. The ideal candidate combines deep technical pretesting expertise with hands-on experience in AI security, enabling proactive defense against sophisticated and evolving threats.


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc)
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)