Senior Penetration Testing Engineer
Core
Penetration testing and red teaming of LLM-powered applications, AI agents, and the AI supply chain to identify prompt injection, jailbreaks, data leakage, and insecure tool usage.
Role type
Senior IC penetration testing engineer (AI/LLM security)
Builds
Security assessments and realistic attack paths for AI agents, MCP servers, and data pipelines.
Domain
Cybersecurity, Artificial Intelligence, Large Language Models
Deliverable
production ML models
Required skills
Prompt injection testing, AI agent security assessment, AI supply chain auditing, attack path chaining, security prioritization, Python programming, cloud security (Azure/AWS/GCP), penetration testing, red teaming, APT emulation, threat intelligence, regulatory compliance (NIST AI RMF, EU AI Act, HIPAA, PCI-DSS, SOC2), tool development, OWASP LLM Top 10, MITRE ATLAS
Preferred skills
OSCP, OSEP, GPEN, GWAPT, GXPN certifications, experience with Burp Suite Pro, Metasploit, Cobalt Strike, Sliver, purple teaming, bypassing AI guardrails
Technologies
Azure AI Foundry, Azure OpenAI, Amazon Bedrock, Vertex AI, Python, C#, Go, PowerShell, JavaScript/TypeScript, Rust, MCP, RAG, Vector stores
Responsibilities
Test LLM applications for prompt injection, jailbreaks, and sensitive data leakage; Assess security of agents and MCP servers including tool permissions and trust boundaries; Assess AI supply chain and data pipelines for poisoned data; Chain findings across application, cloud, identity, and network layers; Clarify priorities and explain security issues to upper management; Use AI agents to speed up recon and regression testing; Mentor peers and learn new attack techniques
Seniority
Senior, hands-on IC
