Senior Web Security Engineer — AI-Driven Pen Testing Remote

Computrabajo; Naucalpan de Juárez; Remote; MXN 900,000 - 1,500,000; Full time

Benefits offered by this job

Remote position

Excellent corporate environment

Growth opportunities

Job summary

Crowe Global member firm in Mexico is seeking a Senior Web Application Penetration Testing Engineer & Offensive AI to lead deep manual testing of web apps and APIs.

You will leverage Burp Suite, Python scripts, and AI-assisted workflows to detect vulnerabilities, craft proofs of concept, and help remediation.

This remote role offers a competitive salary and growth with a top-tier global firm.

Qualifications

• 5+ years of hands-on experience in application security or penetration testing.
• Strong understanding of HTTP, REST APIs, authentication, authorization, session management, and common web security vulnerabilities.
• Manual penetration testing beyond automated scanners and standard vulnerability checks.
• Knowledge of the OWASP Web Security Testing Guide and common risks.
• Hands-on experience using Burp Suite or equivalent tools.
• Experience writing or modifying Python scripts for security testing or automation.
• Ability to validate vulnerabilities, develop proofs of concept, and communicate findings effectively.

Responsibilities

• Perform in-depth manual penetration testing of web applications, REST APIs, and supporting services.
• Identify and validate complex vulnerabilities, including broken access control, authentication weaknesses, business logic flaws, injection, and privilege escalation.
• Analyze architecture, authentication mechanisms, authorization models, and data flows to identify exploitable weaknesses.
• Use Burp Suite and other security testing tools to manipulate requests, validate findings, and develop reproducible proofs of concept.
• Leverage AI and LLM-based tools to support reconnaissance, vulnerability analysis, test case generation, and attack path identification.
• Develop and improve Python scripts, prompts, agents, and API integrations to automate repetitive testing tasks and enhance security assessment workflows.
• Document findings clearly, communicate technical and business impact, and recommend remediation strategies.

Skills

Penetration testing

Web security

Python scripting

AI-assisted security

REST APIs

Security automation

Team leadership

Tools

Burp Suite

Job description

Crowe Global member firm in Mexico is seeking a Senior Web Application Penetration Testing Engineer & Offensive AI to lead deep manual testing of web apps and APIs.

You will leverage Burp Suite, Python scripts, and AI-assisted workflows to detect vulnerabilities, craft proofs of concept, and help remediation.

This remote role offers a competitive salary and growth with a top-tier global firm.