Penetration Tester

Rootedsec; México; A distancia; MXN 700.000 - 1.100.000; Jornada completa

Descripción de la vacante

Bishop Fox is seeking a remote Penetration Tester in Mexico. The role focuses on hands-on testing of modern applications, cloud and AI/LLM security assessments, and delivering actionable remediation guidance to clients.

You will review source code for vulnerabilities, develop exploitation scenarios, run REST API tests, and produce technical reports. The position requires 4+ years in application security, strong communication, and the ability to work independently in a remote, client-facing

Formación

• 4+ years in application security assessments, pentesting or offensive security.
• REST API testing (auth flaws, IDOR, injection, business logic).
• AWS expertise (IAM, STS, S3, Lambda).
• Source code review in Java, C# and Python.

Responsabilidades

• Perform hands-on security testing of modern applications.
• Review source code for vulnerabilities.
• Develop exploitation scenarios and validate controls.
• Run cloud, mobile, hybrid and AI/LLM assessments.
• Deliver technical reports and remediation guidance.

Conocimientos

REST API testing

AWS expertise

Source code review

Strong communication

Herramientas

Burp Suite

Semgrep

Git

AWS CLI

Descripción del empleo

Open roleBishop Fox# Penetration TesterRemote, Mexico· REMOTE## About the roleThe pentester performs hands-on testing and source code review, builds realistic exploitation scenarios and validates security controls. Engagements include cloud, mobile, hybrid application and AI/LLM security assessments, ending with technical reports and remediation guidance for clients.### What you will do* Perform hands-on security testing of modern applications* Review source code for vulnerabilities* Develop exploitation scenarios and validate controls* Run cloud, mobile, hybrid and AI/LLM assessments* Deliver technical reports and remediation guidance### What they ask for* 4+ years in application security assessments, pentesting or offensive security* REST API testing (auth flaws, IDOR, injection, business logic)* AWS expertise (IAM, STS, S3, Lambda)* Source code review in Java, C# and Python* Burp Suite, Semgrep, Git and AWS CLI* Strong written and verbal communication* Must be authorized to work in Mexico without sponsorship* No visa sponsorship### Nice to have* Hardware or embedded security testing* Cloud-native and serverless experience* Consulting or client-facing experience* Certifications or published research* AI/LLM security (prompt injection, RAG risks)## What applying with Rooted meansThis role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.You can read this role without an account. To apply you need a Rooted credential.This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Bishop Fox. Confirm the final details with the original source or during the application process.Posted 2026-05-08