Lead AI-Driven Penetration Tester: Web & API Security

Rising Tide Digital Inc; Taguig; Presencial; PHP 1.200.000 - 2.400.000; Jornada completa

Descripción de la vacante

Rising Tide Digital Inc in the Philippines seeks a Lead Penetration Tester – AI & Web Security to support a U.S. digital bank client. You will lead deep manual testing on core web apps and APIs, using offensive AI tools as force multipliers to expose complex vulnerabilities.

You will validate AI-generated hypotheses, build reproducible PoCs, mentor teammates, and collaborate with developers to remediate systemic flaws.

Formación

• 5+ years in app security/pen testing focused on web apps and APIs.
• Proficient in OWASP Top 10 / API Top 10.
• Proficient with Burp Suite Pro and manual request manipulation.
• Scripting in Python for tooling and AI workflow integration.
• Nice-to-Haves: Fintech background or security certs.

Responsabilidades

• Manual Pen Testing: Perform full-scope testing on web apps/APIs to exploit authorization flaws (IDOR/BOLA), business-logic vulnerabilities, and multi-step attack chains.
• Offensive AI & Automation: Use LLMs for recon, threat modeling, and test generation. Build Python scripts and AI workflows to scale testing depth.
• Validation & PoCs: Validate AI-generated hypotheses to eliminate false positives and build reproducible proofs-of-concept proving real risk.
• Remediation & Mentorship: Partner with developers to demonstrate attack paths, support remediation and mentor team members, fix systemic flaws.

Conocimientos

Penetration testing

API testing

Web security

Python scripting

Threat modeling

Herramientas

Burp Suite Pro

Descripción del empleo

Rising Tide Digital Inc in the Philippines seeks a Lead Penetration Tester – AI & Web Security to support a U.S. digital bank client. You will lead deep manual testing on core web apps and APIs, using offensive AI tools as force multipliers to expose complex vulnerabilities.

You will validate AI-generated hypotheses, build reproducible PoCs, mentor teammates, and collaborate with developers to remediate systemic flaws.