Senior Security Testing Specialist – Application Security

Responsibilities

• Conducts security assessments of applications, APIs, cloud environments, networks, artificial intelligence systems, and other technology platforms to identify vulnerabilities, attack paths, and security control weaknesses.
• Administers and operates security testing capabilities, including DAST platforms, automated scanning infrastructure, vulnerability validation processes, and security testing automation.
• Develops and integrates AI-powered security testing capabilities, including custom testing harnesses, autonomous assessment workflows, and tooling that improves the effectiveness and efficiency of security assessments.
• Performs targeted penetration testing and deep-dive security assessments of critical systems, technologies, and business processes to identify complex attack chains and high-impact vulnerabilities.
• Researches emerging threats, attack techniques, and security technologies to develop innovative testing methodologies and enhance vulnerability discovery capabilities.
• Reviews testing results with stakeholders, determines risk ratings, and provides technical remediation guidance to reduce enterprise security risk.

• Experience performing application, cloud, network, or infrastructure penetration testing.
• Experience administering enterprise vulnerability scanning or DAST platforms.
• Experience with AWS, Azure, Google Cloud Platform (GCP), or cloud‑native technologies.
• Experience assessing AI‑powered applications, large language models (LLMs), AI agents, or machine learning systems.
• Experience with API security testing, authentication and authorization testing, and OWASP Top 10 vulnerabilities.
• Experience with hardware, embedded systems, kiosks, ATMs, IoT, or other specialized technology security assessments.
• Experience designing and developing AI‑powered security testing harnesses, custom security tooling, or automated vulnerability assessment frameworks.
• Strong understanding of attack methodologies, vulnerability research, exploit development, adversarial testing techniques, and security automation.
• Higher level education such as a Masters degree, PhD, or certifications is desirable.

• Masters degree
• PhD