Senior Offensive Security Engineer - AI-Driven Pen Testing

Rising Tide Digital, Inc.; Taguig; Presencial; PHP 700.000 - 1.400.000; Jornada completa

Descripción de la vacante

Rising Tide Digital, Inc. is seeking an experienced application security professional to execute full-scope pen testing on web apps and APIs, using AI-driven approaches to scale assessments. The role includes validating AI hypotheses and producing reproducible PoCs to demonstrate real risk.

You will collaborate with developers to remediate findings, mentor peers, and help fix systemic security flaws across projects.

Formación

• 5+ years in app security/pen testing with deep web app and API focus.
• Experience with OWASP Top 10 and OWASP API Top 10.
• Proficient in Python scripting and building AI workflows for testing.
• Experience with Burp Suite Pro.

Responsabilidades

• Manual Pen Testing: Perform full-scope testing on web apps/APIs to exploit authorization flaws (IDOR/BOLA), business-logic vulnerabilities, and multi-step attack chains.
• Offensive AI & Automation: Use LLMs for recon, threat modeling, and test generation. Build Python scripts and AI workflows to scale testing depth.
• Validation & PoCs: Validate AI-generated hypotheses to eliminate false positives and build reproducible proofs-of-concept proving real risk.
• Remediation & Mentorship: Partner with developers to demonstrate attack paths, support remediation, mentor team members, and fix systemic flaws.

Conocimientos

Python

AI/LLMs in security testing

Manual testing techniques

HTTP APIs

OWASP Top 10

OWASP API Top 10

OAuth 2.0 / OIDC

IDOR testing

Herramientas

Burp Suite Pro

Descripción del empleo

Rising Tide Digital, Inc. is seeking an experienced application security professional to execute full-scope pen testing on web apps and APIs, using AI-driven approaches to scale assessments. The role includes validating AI hypotheses and producing reproducible PoCs to demonstrate real risk.

You will collaborate with developers to remediate findings, mentor peers, and help fix systemic security flaws across projects.