Senior Penetration Tester (AI Security / Purple Team)

270 - 300 PLN/ godz./ godz.B2BB2B (netto)

MidZdalnieFull-time·B2B

#479417·Dodano 2 dni temu·4

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

AISecurityTestingLLMsRAGCloud platformLLM PythonPowerShellBash C C++C#Communication skillsAWSAzure SecurityCloudRBACOSCPCybersecurity

Podsumowanie oferty

You will conduct offensive security assessments and adversary simulations for AI-powered enterprise solutions, including LLMs, GenAI, RAG systems, AI agents, and MCP integrations. The role combines hands-on AI security testing with Purple Team activities and evaluation of security controls.

Wymagania

Hands-on experience in AI/LLM security testing, including offensive assessments of GenAI applications, AI agents, or other AI-powered enterprise solutions.
At least 3 years of experience in Red Teaming or Purple Teaming, or 4+ years in offensive security, including hands-on testing in complex technology environments.
Practical knowledge of AI security threats, including prompt injection, RAG-related vulnerabilities, insecure tool usage, and attacks targeting AI agents.
Understanding of LLM architectures, AI application integrations, APIs, RAG pipelines, and agent-based systems.
Experience with adversary simulation, attack techniques, and threat-informed security testing.
Strong scripting or programming skills in Python, PowerShell, Bash, C/C++, or C#.
Familiarity with offensive security tools and frameworks used in advanced security assessments.
Ability to independently plan and execute technical security assessments and communicate findings clearly.
Good communication skills and experience working with cross-functional technical teams.

Nice to have:

Experience with AWS or Azure security testing.
Knowledge of cloud identity and access management, including RBAC, managed identities, and service principals.
Experience with Cobalt Strike, Brute Ratel, or similar adversary simulation frameworks.
Certifications such as OSCP, OSEP, OSED, CRTO, OSAI, or equivalent.

Obowiązki

Conduct offensive security assessments of AI-powered applications, including LLMs, GenAI solutions, RAG systems, AI agents, and MCP-based integrations.
Identify and test AI-specific vulnerabilities such as prompt injection, sensitive data exposure, insecure tool execution, and weaknesses in agent permissions and workflows.
Design and execute adversary simulation scenarios based on real-world attack techniques and threat intelligence.
Evaluate the effectiveness of security controls across enterprise infrastructure, cloud platforms, endpoints, and AI environments.
Develop and customize scripts, testing tools, and attack scenarios to support security assessments.
Work with Red Team, Blue Team, SOC, and Detection Engineering teams to improve threat detection and response capabilities.
Document findings, assess security risks, and provide actionable recommendations to technical and business stakeholders.
Research emerging attack techniques and contribute to the continuous improvement of offensive security practices.

Link Group

543 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz