Penetration Tester

Tasks

• Analyze service interactions and trust boundaries
• Assess authentication authorization
• Assess prompt injection and data leakage risks
• Collaborate with engineering on fixes
• Develop proof-of-concept exploits
• Ensure AI tenant boundaries and authorization
• Evaluate business logic flaws
• Evaluate multi tenant AWS attack paths
• Identify data exposure issues
• Improve testing playbooks and tooling
• Maintain researcher communication
• Manage bug bounty scope and policies
• Perform manual penetration testing
• Perform security reviews with attacker mindset
• Retest remediations
• Test API security and access controls
• Test tenant isolation
• Track remediation status
• Triage bug bounty submissions
• Use AI assisted workflows for testing
• Validate input validation
• Validate security impact
• Write high quality security reports

Perks/Benefits

• Career development and growth
• Dental plan
• Employer supported pension scheme
• Financial planning resources
• Hybrid schedules
• Income protection
• Life assurance
• Mentoring
• Paid Maternity Leave
• Paid paternity leave
• Private health insurance
• Remote work flexibility
• Wellness supports
• Work from home flexibility

Skills/Tech-stack

API Security | AWS | Application Security | Authentication | Authorization | Bug Bounty | Bug bounty management | Burp Suite | Business Logic | Business logic testing | CI/CD | Cloud Security | Coordinated Disclosure | Input validation | Java | JavaScript | LLM security | Logic testing | Multi-tenant | Multi-tenant Security | OAuth | Penetration Testing | Prompt injection | Proof of Concept | Python | REST API | Security Automation | Security Testing | Session management | Tenant Security | Threat Analysis | Threat modeling | TypeScript | Vulnerability Assessment | Web Security