Penetration Testing Engineer (MTS)
- San Francisco, United States
- Mid Level
- 2+ years
- Posted
Skills
Required
- penetration testing / offensive security / application security testing
- AI
- application security
- attack chains
- identity and access control failures
- cloud security
- LLM-based systems
- automation
- custom scripts / payloads / proof-of-concept development
- Bug Bounty
- LLMs
Preferred
- cloud architectures
- identity-centric security models
- cloud
- cloud infrastructure
- AI-powered
- AI/ML
- paths
- security controls
- mitigation recommendations
Join our team as a Penetration Testing Engineer, where you'll execute hands-on penetration tests across various applications, platforms, cloud infrastructure, and AI-powered systems. You'll work closely with engineering and AppSec teams to turn findings into concrete remediation while building your skills in cloud, identity, and AI/ML attack surfaces. This role requires 2-4 years of hands-on experience in penetration testing, offensive security, or application security testing.
Responsibilities
- Execute deep, hands-on penetration tests across applications, platforms, cloud infrastructure, and AI-powered systems.
- Partner with engineering and AppSec teams to turn findings into concrete remediation, while building skills across cloud, identity, and AI/ML attack surfaces.
- Produce technically detailed reports covering exploitation paths, missing security controls, and mitigation recommendations, and collaborate with engineering, AppSec, and Detection & Response teams on findings.
- You can clearly articulate exploitation mechanics, impact, and practical remediation steps to engineers and security teams
Requirements
- You have 2-4 years of hands-on experience in penetration testing, offensive security, or application security testing
- You understand application security vulnerabilities and attack chains, identity and access control failures, cloud security fundamentals, and security risks specific to AI and LLM-based systems
- You have experience performing penetration testing engagements in production or production-like environments, using manual techniques and automation/AI tools
- You have experience with custom scripts, payloads, or proof-of-concept development
- You've participated in Bug Bounty programs
- You have experience using AI/LLMs for offensive security work or vulnerability discovery
Preferred
- You're familiar with cloud architectures and identity-centric security models
Pay
USD 117,200 - 194,200
jobapplier