Penetration Tester | Cloud, API & AI Security

Bishop Fox; México; Presencial; MXN 600.000 - 1.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Generous Time Off

Team Events

Work From Home Support

Training Budget

Saving Fund

Health and Wellbeing programs

International Travel Opportunities

Descripción de la vacante

Bishop Fox in Mexico is seeking an experienced Pen Tester to join our offensive security practice. You will perform hands-on assessments across web, mobile, cloud, and API environments, delivering pragmatic findings and actionable remediation guidance to global clients.

We value deep technical skill, structured testing methods, and clear communication with technical and executive stakeholders. You’ll collaborate with global teams on diverse engagements and innovative security challenges.

Formación

• 4+ years of hands-on experience in application security assessments or penetration testing.
• Strong understanding of modern attack techniques and common web/mobile/cloud vulnerabilities.
• Experience testing REST APIs, including auth flaws, IDORs, injections, session management, and business logic flaws.
• Proficiency with cloud platforms and security concepts (AWS-focused).
• Ability to review source code for security issues in Java, C#, and Python.

Responsabilidades

• Perform hands-on security testing across web, mobile, cloud-native, and API environments.
• Analyze application behavior, review code, and identify exploit paths.
• Provide actionable remediation guidance and clear findings to clients.
• Collaborate with clients and internal teams across engagements from scoping to reporting.
• Maintain structured testing methodologies and thorough documentation.

Conocimientos

Application security

Penetration testing

Cloud security

REST API testing

Communication

Team collaboration

Cross-platform

Herramientas

Burp Suite

Semgrep

Git

AWS CLI

API testing tools

Descripción del empleo

Bishop Fox in Mexico is seeking an experienced Pen Tester to join our offensive security practice. You will perform hands-on assessments across web, mobile, cloud, and API environments, delivering pragmatic findings and actionable remediation guidance to global clients.

We value deep technical skill, structured testing methods, and clear communication with technical and executive stakeholders. You’ll collaborate with global teams on diverse engagements and innovative security challenges.