Senior AI Security Penetration Tester

You’ll work within a team of experienced security specialists on innovative projects for leading organizations across various sectors. As a Senior AI Security Penetration Tester, you’ll focus on both traditional penetration testing and the unique attack vectors created by the use of AI for our clients.

What will you be performing?

• Conduct security assessments and penetration tests on AI applications, chatbots, and generative AI platforms.
• Testing Large Language Models (LLMs) and AI integrations for vulnerabilities such as prompt injection, jailbreaks, data leakage, and model manipulation.
• Identifying and exploiting weaknesses within AI/ML pipelines, AI agents, and autonomous workflows.
• Conducting web application, CI/CD, API, and cloud security assessments within our clients’ environments.
• Simulating realistic attack scenarios, from reconnaissance and exploitation to post-exploitation.
• Analyzing AI-specific risks such as prompt injection, data and model poisoning, unbounded consumption, etc.
• Drafting clear technical reports with concrete recommendations for improvement.
• Developing new attack techniques, tools, and testing methodologies to test AI systems.
• Actively contributing to AI Security Research & Development and thought leadership within Bureau Veritas Cybersecurity.
• Mentoring and coaching less experienced consultants in the field., As a Senior Offensive Security Specialist, you’ll work on challenging projects as part of a team of experts who share your passion for cybersecurity.

You’ll share knowledge with your experienced colleagues, perform research together, and challenge each other technically. We believe that the best specialists never stop growing. That’s why we invest in training, certifications, attending conferences, and research.

With us, you’ll find yourself in an environment where the level of expertise is demonstrably high. Our specialists not only tackle complex security challenges but are also deployed for investigations and assessments of systems and organizations of national importance. For example, our experts conducted source code and security investigations for the DigiD backend on behalf of Logius (https://www.tweedekamer.nl/downloads/document?id=2024D18965). In addition, our researchers were involved in security reviews of the Dutch CoronaMelder app (https://www.pentestreports.com/reports/secura/Coronamelder-REPORT-v1.0). Security assessments are also being conducted for systems operated by the Electoral Council (https://www.kiesraad.nl/site/binaries/site-content/collections/documents/2025/09/15/technical-security-assessment-transfer-platform/Kiesraad-Transfer-Platform-REPORT-v0.5.pdf). And there are many more exciting and impactful projects that we, of course, can’t tell you about just yet.

What sets us apart is that we don’t just claim our expertise-we have it independently verified. Quality, specialization, and thought leadership are deeply embedded in our organization. We actively share our knowledge within the cybersecurity community, publish research, and contribute to the development of standards within the field. This is also reflected in our accreditations. For example, we were the first cybersecurity company in the Netherlands to receive the CCV Penetration Testing certification, and to this day we remain involved in the ongoing development of this certification.

For professionals who want to surround themselves with the best specialists, work on socially relevant projects, and continuously deepen their expertise, we offer an environment where you can truly make a difference.

We actively strive to create a safe, inclusive, and positive work environment. Our values guide how we collaborate, provide feedback, and evaluate performance. We support well-being and team cohesion through team activities, access to OpenUp.com, and by promoting a healthy work-life balance with flexible work options.

You are an experienced penetration tester with a passion for innovation and a strong interest in the security challenges posed by AI. You combine technical depth with an inquisitive mindset., * At least several years of experience in web application security, API security, and penetration testing.

• An affinity for artificial intelligence, machine learning, and generative AI.
• Knowledge of the OWASP Top 10 for LLM Applications and AI-specific attack techniques.
• Knowledge of modern web applications, cloud platforms, and API architectures.
• Experience with Python, API testing, security automation, or security tooling.
• The ability to think like an attacker: creative, curious, critical, and persistent.
• Strong communication skills and the ability to convey complex findings to clients in an understandable way.
• Certifications such as CWES, OSCP, OSEP, OSWE, AI300, and HTB COAE.
• Experience with LLM red teaming, prompt engineering, and adversarial machine learning.
• Experience with secure software development and DevSecOps.
• Proficiency in Dutch and English.

Do you want to be at the forefront of one of the fastest-growing fields in cybersecurity? Are you curious about how AI systems, chatbots, AI agents, and generative AI solutions can be attacked, manipulated, and exploited? Then Bureau Veritas Cybersecurity offers you the opportunity to grow as a cybersecurity professional alongside the latest developments in AI., Do you want to help organizations use AI safely and responsibly, while staying at the forefront of the most innovative field in cybersecurity?