AI Security Penetration Analyst

Citigroup Inc.; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Citi in London is seeking an AI Offensive Security Analyst to join the OSVM team. You will run security assessments against AI systems and use AI-powered tools to speed testing, while building new tooling and adapting to evolving threats.

You should have practical security testing experience on web apps, APIs, or mobile apps, and familiarity with Burp Suite, nuclei, and Nmap. Knowledge of OWASP Top 10 and ability to report risk clearly is essential.

Qualifications

• Experience running pen tests or vulnerability assessments on web apps, APIs, or mobile apps.
• Familiarity with Burp Suite, nuclei, Nmap or similar tools.
• Knowledge of OWASP Top 10 and exposure to OWASP LLM Top 10 or MITRE ATLAS.
• Ability to triage findings and communicate risk clearly.

Responsibilities

• Test AI applications and agents; design and execute test cases for identified classes.
• Use AI to enhance pen testing; broader coverage and faster reconnaissance.
• Embed security into development; coordinate with engineers to assess AI apps early.

Skills

Penetration testing

Vulnerability assessments

Security testing tools

OWASP Top 10

LLM tools usage

Tools

Burp Suite

Nuclei

Nmap

Job description

Citi in London is seeking an AI Offensive Security Analyst to join the OSVM team. You will run security assessments against AI systems and use AI-powered tools to speed testing, while building new tooling and adapting to evolving threats.

You should have practical security testing experience on web apps, APIs, or mobile apps, and familiarity with Burp Suite, nuclei, and Nmap. Knowledge of OWASP Top 10 and ability to report risk clearly is essential.