Role & seniority: Senior AI Penetration Tester (independent, leads engagements from planning to reporting)

Stack/tools: Penetration testing: Burp Suite Pro, Netsparker, Checkmarx; AI/security: TensorFlow, PyTorch, LLM APIs, LangChain; focus on APIs, web apps, and mobile clients

Top 3 responsibilities

Conduct AI-focused penetration testing (manual testing of AI/ML systems, AI-driven features, traditional and AI-centric attack surfaces)
Perform threat modeling, architecture reviews, and adversarial ML risk assessments; develop AI security testing methodologies
Communicate findings to technical/non-technical audiences; drive remediation discussions and advise on secure AI model deployment

Must-have skills

≥3 years in penetration testing (APIs, web, mobile)
Experience with AI red teaming, adversarial attacks, prompt engineering, LLM vulnerabilities, model evasion
Proficiency with Burp Suite Pro, Netsparker, Checkmarx; familiarity with TensorFlow, PyTorch, LLM APIs, LangChain
Strong communication/presentation skills; relevant ethical hacking certifications (e.g., GWAPT, CREST, OSWE, OSWA)
Bachelor’s degree or equivalent experience; US work authorization

Nice-to-haves

Certifications or training in AI security techniques
Deep experience in AI attack techniques, threat modeling for AI-powered systems, and collaboration with red teams/SOC
Location & work type: Remote role; must be authorized to work in the United States without vi

Full Description

Job Summary We’re looking for a AI Penetration Tester to support our team in Remote. This role offers the opportunity to work on meaningful projects, collaborate with talented colleagues, and contribute to the success of a growing company. If you’re someone who takes initiative, values continuous learning, and thrives in a collaborative setting, we’d love to hear from you. Key Responsibilities

Execute AI-focused penetration testing engagements that include manual penetration testing of systems incorporating AI/ML, objective-based testing of AI-driven features, and coverage of both traditional and AI-centric attack surfaces.
Perform threat modeling for AI-powered software systems, evaluate AI-related business logic, and conduct architecture reviews. Focus on adversarial ML vectors, prompt-based vulnerabilities, and other AI-specific security risks.
Develop and improve AI-driven tools and methodologies for offensive security tasks such as discovery, exploitation, fuzzing, and adversarial ML testing, emphasizing web apps, APIs, and mobile clients.
Demonstrate AI penetration testing findings to technical and non-technical audiences, including live demos.
Collaborate with engineering, development, and security teams to communicate findings, lead remediation discussions, and advise on secure AI model development and deployment best practices.
Research emerging AI attack techniques and evaluate their potential impact, identify vulnerabilities, and provide actionable recommendations to strengthen AI defenses.
Collaborate with internal Red Teams, SOC analysts, and AI security researchers, sharing insights and data to enhance AI-driven offensive security methodologies. Refine existing AI red teaming approaches by integrating new adversarial ML techniques and proven exploitation tactics.
Act independently on AI penetration testing with minimal oversight, guiding engagements from planning through execution and reporting.

Qualifications: The skills, abilities, specific knowledge, education, and minimum experience necessary to perform this job.

Minimum three (3) years of recent penetration testing experience focused on APIs, web applications, and mobile applications. Experience with AI model testing or AI security is highly desirable.
Proven background in AI red teaming and adversarial attack development, including prompt engineering attacks, LLM-based vulnerability analysis, and model evasion techniques.
Proficiency with penetration testing tools (e.g., Burp Suite Pro, Netsparker, Checkmarx) and AI security frameworks (e.g., TensorFlow, PyTorch, LLM APIs, LangChain).