Penetration Tester (AI-Driven)

Rising Tide Digital Inc; Taguig; On-site; PHP 1,562,000 - 2,344,000; Full time

Job summary

Rising Tide Digital Inc is seeking an experienced security tester to lead offensive security initiatives for web apps and APIs, leveraging AI-assisted tooling, and delivering actionable remediation guidance. You will collaborate with engineering teams to demonstrate attack paths and support remediation, while building Python-based automation.

This role requires strong hands-on testing and deep knowledge of modern security practices.

Qualifications

• 5+ years of hands-on application security or penetration-testing experience, with substantial experience testing web applications and APIs.
• Advanced hands-on experience with Burp Suite Professional and related offensive-security tooling.

Responsibilities

• Perform full-scope penetration testing of customer-facing and internal web applications, APIs, and supporting services.
• Conduct threat modeling and analyze application architecture, trust boundaries, authentication mechanisms, authorization models, APIs, data flows, and critical business workflows.
• Perform deep manual security testing that goes well beyond automated scanners and standard vulnerability checklists.
• Produce high-quality reports with executive summaries, technical analysis, clear reproduction steps, supporting evidence, risk context, and actionable remediation guidance.
• Work directly with application and engineering teams to explain weaknesses, demonstrate attack paths, support remediation, and perform retesting.
• Develop AI-assisted testing workflows and reusable tooling to increase testing speed, depth, and coverage.
• Demonstrated hands-on experience using LLMs or AI-assisted security technologies in offensive-security workflows.
• Ability to combine AI reasoning with expert manual penetration testing rather than treating AI output as authoritative.
• Experience building or modifying Python-based security automation, API integrations, prompt workflows, or agentic testing capabilities.
• Strong understanding of AI limitations, including hallucinations, false positives, incomplete context, unsafe recommendations, and incorrect exploitation hypotheses.

Skills

Application security

Penetration testing

Burp Suite

AI in security

Python scripting

Tools

Burp Suite Professional

Job description

• Perform full-scope penetration testing of customer-facing and internal web applications, APIs, and supporting services.
• Conduct threat modeling and analyze application architecture, trust boundaries, authentication mechanisms, authorization models, APIs, data flows, and critical business workflows.
• Perform deep manual security testing that goes well beyond automated scanners and standard vulnerability checklists.

Offensive AI & AI-Assisted Testing

• Leverage approved offensive AI technologies and LLM-based security tooling throughout the penetration-testing lifecycle.
• Use AI to assist with reconnaissance, attack-surface analysis, endpoint and API analysis, test-case generation, vulnerability hypothesis development, and attack-path identification.
• Apply AI-assisted analysis to identify unusual behavior, authorization inconsistencies, business-logic weaknesses, and potential multi-step exploitation paths.
• Develop reusable prompts, Python scripts, agents, API integrations, or workflows that increase testing speed, consistency, depth, and coverage.

Reporting, Remediation & Program Improvement

• Produce high-quality reports with executive summaries, technical analysis, clear reproduction steps, supporting evidence, risk context, and actionable remediation guidance.
• Work directly with application and engineering teams to explain weaknesses, demonstrate attack paths, support remediation, and perform retesting.

Required Qualifications

• 5+ years of hands-on application security or penetration-testing experience, with substantial experience testing web applications and APIs.
• Advanced hands-on experience with Burp Suite Professional and related offensive-security tooling.

Required Offensive AI Experience

• Demonstrated hands-on experience using LLMs or AI-assisted security technologies in offensive-security workflows.
• Ability to combine AI reasoning with expert manual penetration testing rather than treating AI output as authoritative.
• Experience building or modifying Python-based security automation, API integrations, prompt workflows, or agentic testing capabilities.
• Strong understanding of AI limitations, including hallucinations, false positives, incomplete context, unsafe recommendations, and incorrect exploitation hypotheses.
• Ability to protect sensitive application data, credentials, source code, requests and responses, architecture information, and vulnerability data when using approved AI systems.