AI Offensive Security Engineer | Hybrid London

Salt; Greater London; Hybrid; GBP 77.000 - 123.000; Vollzeit

Zusammenfassung

Salt is seeking an AI Offensive Security Engineer in London to join the offensive security function of a leading financial services organization. Work at the intersection of AI, application security and ethical hacking to develop AI-powered security testing capabilities.

You will apply AI-assisted tools for penetration testing, source-code analysis, vulnerability discovery and automation, in a hands-on role with a practical engineering focus.

Qualifikationen

• Minimum 3 years' experience in Application Security, Penetration Testing or Security Engineering.
• Hands-on experience with SAST, DAST, vulnerability assessments and penetration testing.
• Experience testing web apps and APIs, identifying common vulnerabilities.
• Experience using LLMs/AI agents for security analysis, coding, automation or testing.
• Good scripting or programming skills, ideally Python.
• Knowledge of security testing frameworks (OWASP, CWE, CVE, MITRE ATT&CK).
• Experience with security tools and documenting findings.
• Understanding secure development practices and enterprise controls.
• Strong communication to explain vulnerabilities and remediation options.
• Experience in banking/regulated environments; OSCP/OSWE/CEH/CREST desirable.

Aufgaben

• Perform application security assessments and penetration testing using traditional and AI-assisted tools.
• Execute SAST, DAST, and web/API security assessments.
• Use LLMs/AI agents to support vulnerability identification, code analysis and test automation.
• Configure AI models, prompts and workflows to improve testing effectiveness.
• Conduct authorised offensive tests following established methodologies and rules of engagement.
• Investigate vulnerabilities, validate exploitability and assess business impact.
• Produce clear findings with evidence and remediation recommendations.
• Collaborate with developers and security teams to address fixes.
• Develop Python scripts and automation to support activities.
• Integrate security testing into CI/CD environments and cloud architectures.

Ausbildung

OSCP/OSWE/CEH/CREST certifications

Tools

Burp Suite

OWASP ZAP

Semgrep

Checkmarx

Fortify

Git

Python

Azure

Docker

Kubernetes

Jobbeschreibung

Salt is seeking an AI Offensive Security Engineer in London to join the offensive security function of a leading financial services organization. Work at the intersection of AI, application security and ethical hacking to develop AI-powered security testing capabilities.

You will apply AI-assisted tools for penetration testing, source-code analysis, vulnerability discovery and automation, in a hands-on role with a practical engineering focus.