Application Security Penetration Tester — AI/LLM Focus

Citi; Irving (TX); On-site; USD 96,000 - 145,000; Full time

Benefits offered by this job

Medical, dental & vision coverage

401(k)

Wellness programs

Paid time off

Job summary

Citi is seeking an Application Security Penetration Tester to join its Offensive Security team in Irving, TX. This role performs deep vulnerability assessments across web apps, mobile, APIs, and AI/LLM implementations. You will translate findings into risk guidance for developers and architects.

The position welcomes experienced testers or engineers transitioning to cybersecurity, with opportunities to drive innovation in AI/LLM-driven pentesting and automation.

Qualifications

• Hands-on penetration testing or software development experience in an enterprise setting.
• Familiarity with dynamic/proxy/network testing tools (Burp Suite, AppScan, Nessus, NMAP, OWASP ZAP).
• Experience with static analysis tools (Checkmarx, Snyk, SonarQube).
• Knowledge of AI security/adversarial testing tools is advantageous.

Responsibilities

• Conduct manual vulnerability assessments across applications and infrastructure.
• Identify and validate security vulnerabilities in Citi applications, APIs, cloud-native services, and AI/ML architectures.
• Engineer proof-of-concept exploits to demonstrate risk and impact.
• Research LLM-based security testing techniques to uncover non-obvious flaws.
• Document findings with reproduction steps and risk ratings for technical and non-technical audiences.
• Outline remediation and defense-in-depth recommendations to stakeholders.

Skills

Python

Java

C/C++

NodeJS

Education

Bachelor’s degree in Computer Science or related

Tools

Burp Suite

AppScan

Nessus

OWASP ZAP

Job description

Citi is seeking an Application Security Penetration Tester to join its Offensive Security team in Irving, TX. This role performs deep vulnerability assessments across web apps, mobile, APIs, and AI/LLM implementations. You will translate findings into risk guidance for developers and architects.

The position welcomes experienced testers or engineers transitioning to cybersecurity, with opportunities to drive innovation in AI/LLM-driven pentesting and automation.