Security Analyst

ValueLabs; Hyderabad; On-site; INR 3,000,000 - 6,500,000; Full time

Job summary

Valuelabs is seeking an AI-Enabled Penetration Tester to lead advanced security testing across AI-enabled platforms, cloud environments, and enterprise infra. The role focuses on GenAI/LLM-based apps, cloud-native SaaS, and IAM/cryptography controls while driving automated testing and team mentorship.

You will perform adversary simulations, craft remediation guidance, and collaborate with cross-functional teams to strengthen SSDLC processes.

Qualifications

• 8+ years of hands-on Penetration Testing, Offensive Security, Red Teaming, Vulnerability Assessment, and Security Testing.
• Strong expertise in Web App Pen Testing for SaaS/cloud-native platforms.
• Experience evaluating AI security, GenAI/LLM-based apps, and OWASP LLM Top 10 risks.

Responsibilities

• Lead and execute advanced penetration testing across AI-enabled platforms, SaaS, cloud, and enterprise infra.
• Perform red team engagements, adversary simulations, and attack emulation exercises.
• Collaborate with DevSecOps teams to integrate findings into SSDLC.
• Mentor junior testers and develop testing playbooks.
• Prepare risk-based remediation recommendations and clear security reports.

Skills

Penetration testing

Red team

Vulnerability assessment

Security testing

AI security assessments

Python scripting

PowerShell scripting

Bash scripting

Cloud security (GCP/AWS/Azure)

Kubernetes security

Docker security

Threat modeling

SSDLC

Report writing

Communication to stakeholders

Education

Bachelor's degree in Computer Science/Cyber Security/Information Technology

Tools

Python

PowerShell

Bash

SAST/DAST/SCA tools

Kubernetes

Docker

Terraform/CloudFormation

Job description

We are hiring for Security Tester (AI-Enabled Penetration Tester)

JD:

AI-Enabled Penetration Tester A Day in the Life of an AI-Enabled Penetration Tester Lead and execute advanced penetration testing and offensive security assessments across AI-enabled platforms, SaaS applications, cloud environments, and enterprise infrastructure. Conduct comprehensive security testing of GenAI/LLM-based applications, AI models, agents, APIs, and supporting ecosystems, leveraging the OWASP LLM Top 10 and emerging AI security frameworks. Perform web application penetration testing on cloud-native SaaS platforms, identifying vulnerabilities, exploitation paths, and business logic flaws. Execute red team engagements, adversary simulations, and attack emulation exercises to assess organizational security posture and resilience. Assess cloud security controls, configurations, and attack surfaces across GCP (mandatory), with additional exposure to Azure and AWS environments. Develop and utilize custom security testing tools, scripts, and automation using Python, PowerShell, and Bash to enhance offensive security operations. Identify, exploit, and validate vulnerabilities across applications, APIs, cloud services, containerized environments, and AI systems, providing risk-based remediation recommendations. Collaborate with application, cloud, and DevSecOps teams to improve security posture and incorporate findings into SSDLC processes. Evaluate authentication, authorization, IAM, cryptographic implementations, and network security controls through hands-on testing. Perform threat-led assessments, attack path analysis, and security reviews covering modern architectures including Kubernetes, Docker, and Infrastructure-as-Code deployments. Drive continuous improvement of penetration testing methodologies, security automation capabilities, and AI security assessment practices. Mentor junior security testers and contribute to the development of offensive security best practices, playbooks, and testing frameworks. Stay current with emerging attack techniques, cloud threats, AI security risks, and offensive security research. What You'll Need Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field (preferred). 8+ years of hands-on experience in Penetration Testing, Offensive Security, Red Teaming, Vulnerability Assessment, and Security Testing. Strong expertise in Web Application Penetration Testing, particularly for SaaS and cloud-native applications. Proven experience conducting AI security assessments, testing AI/LLM-based applications, and validating controls against OWASP LLM Top 10 risks. Deep understanding of cloud security, particularly GCP, including IAM, networking, logging, storage, compute, and cloud-native security services; exposure to Azure and AWS is a plus. Strong proficiency in Python, PowerShell, and Bash scripting for offensive tooling, automation, and security testing. Hands-on experience identifying and exploiting vulnerabilities in web applications, APIs, cloud services, and modern application architectures. Solid understanding of OWASP Top 10, secure coding practices, application security principles, and common attack methodologies. Experience with SAST, DAST, SCA, threat modeling, secure code reviews, and SSDLC practices. Strong knowledge of network security, authentication protocols, cryptography, identity and access management (IAM), and web application security controls. Experience with security automation, vulnerability validation, and offensive security tooling. Excellent communication and report-writing skills, with the ability to clearly articulate technical risks and remediation recommendations to technical and business stakeholders. Relevant certifications such as OSCP, OSWE, CRTO, GPEN, GWAPT, CISSP, or cloud security certifications are highly desirable. Ability to thrive in a fast-paced, client-facing environment and manage multiple assessments simultaneously. Willingness to support occasional after-hours testing, red team exercises, and critical security initiatives when required. Nice-to-Haves Experience conducting threat modeling and security architecture reviews. Hands-on experience with Kubernetes Security, Docker Security, and container escape testing techniques. Knowledge of Infrastructure-as-Code (Terraform, CloudFormation, ARM) security assessment and misconfiguration testing. Experience with Web Application Firewalls (WAFs), API Security Testing, and Zero Trust architectures. Familiarity with Digital Forensics and Incident Response methodologies. Knowledge of Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platforms (CNAPP). Experience integrating security into DevSecOps and CI/CD pipelines. Understanding of SAMM, ISO 27001, NIST Cybersecurity Framework, and other industry-standard security frameworks. Experience developing custom offensive security tools, automation frameworks, or AI-assisted security testing capabilities. Technical leadership experience mentoring security professionals and leading complex penetration testing engagements.