AI Security Penetration Analyst – Offensive Red Team

Citi; Tampa (FL); On-site; USD 87,000 - 212,000; Full time

Job summary

Citi's Offensive Security and Vulnerability Management (OSVM) organization in Tampa, FL is hiring an AI-focused security analyst. You will run penetration tests, vulnerability assessments, and adversarial evaluations of AI-enabled applications and agents, building tools to scale security testing.

The role emphasizes practical security engineering, triage of AI-driven findings, and collaboration with developers to embed security early in the AI product lifecycle.

Qualifications

• Hands-on experience running penetration tests or vulnerability assessments against web applications, APIs, or mobile applications.
• Familiarity with common security testing tools: Burp Suite, nuclei, nmap, or similar
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience; Master’s degree preferred

Responsibilities

• Testing AI applications and agents. GenAI applications, agentic systems, and LLM-backed products require testing beyond standard web app methods.
• Using AI to work better. AI-assisted testing expands coverage and speeds up reconnaissance and validation.
• Embedding security into development. Collaborate with devs to ensure AI security assessments occur at the right points in the build process.

Skills

Security Testing

AI Security

Penetration Testing

Education

Bachelor's degree in Computer Science or Information Security

Master’s degree preferred

Tools

Burp Suite

Nuclei

Nmap

Job description

Citi's Offensive Security and Vulnerability Management (OSVM) organization in Tampa, FL is hiring an AI-focused security analyst. You will run penetration tests, vulnerability assessments, and adversarial evaluations of AI-enabled applications and agents, building tools to scale security testing.

The role emphasizes practical security engineering, triage of AI-driven findings, and collaboration with developers to embed security early in the AI product lifecycle.