Senior AI-Driven Penetration Tester for Web & APIs

Rising Tide Digital Inc; Taguig; On-site; PHP 1,562,000 - 2,344,000; Full time

Job summary

Rising Tide Digital Inc is seeking an experienced security tester to lead offensive security initiatives for web apps and APIs, leveraging AI-assisted tooling, and delivering actionable remediation guidance. You will collaborate with engineering teams to demonstrate attack paths and support remediation, while building Python-based automation.

This role requires strong hands-on testing and deep knowledge of modern security practices.

Qualifications

• 5+ years of hands-on application security or penetration-testing experience, with substantial experience testing web applications and APIs.
• Advanced hands-on experience with Burp Suite Professional and related offensive-security tooling.

Responsibilities

• Perform full-scope penetration testing of customer-facing and internal web applications, APIs, and supporting services.
• Conduct threat modeling and analyze application architecture, trust boundaries, authentication mechanisms, authorization models, APIs, data flows, and critical business workflows.
• Perform deep manual security testing that goes well beyond automated scanners and standard vulnerability checklists.
• Produce high-quality reports with executive summaries, technical analysis, clear reproduction steps, supporting evidence, risk context, and actionable remediation guidance.
• Work directly with application and engineering teams to explain weaknesses, demonstrate attack paths, support remediation, and perform retesting.
• Develop AI-assisted testing workflows and reusable tooling to increase testing speed, depth, and coverage.
• Demonstrated hands-on experience using LLMs or AI-assisted security technologies in offensive-security workflows.
• Ability to combine AI reasoning with expert manual penetration testing rather than treating AI output as authoritative.
• Experience building or modifying Python-based security automation, API integrations, prompt workflows, or agentic testing capabilities.
• Strong understanding of AI limitations, including hallucinations, false positives, incomplete context, unsafe recommendations, and incorrect exploitation hypotheses.

Skills

Application security

Penetration testing

Burp Suite

AI in security

Python scripting

Tools

Burp Suite Professional

Job description

Rising Tide Digital Inc is seeking an experienced security tester to lead offensive security initiatives for web apps and APIs, leveraging AI-assisted tooling, and delivering actionable remediation guidance. You will collaborate with engineering teams to demonstrate attack paths and support remediation, while building Python-based automation.

This role requires strong hands-on testing and deep knowledge of modern security practices.