Application Security Penetration Tester — AI/LLM Focus

Citigroup Inc.; Irving (TX); On-site; USD 96,000 - 145,000; Full time

Job summary

Citi is seeking an Application Security Penetration Tester to join its Offensive Security team in Irving, TX. You will perform deep-dive vulnerability assessments across web apps, APIs, and AI/LLM architectures, translating findings into actionable risk guidance for developers and architects.

The role suits experienced testers or developers transitioning to cybersecurity, with a focus on researching AI/LLM-driven security testing techniques.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 1–3 years hands-on experience in penetration testing or security assessment.
• Experience with dynamic/proxy testing tools and static analysis tools.

Responsibilities

• Conduct manual vulnerability assessments and penetration testing across applications and infrastructure.
• Identify and validate security vulnerabilities in Citi applications, APIs, and cloud services.
• Develop functional PoCs and exploit scenarios to demonstrate risks.
• Research and apply LLM-based security testing methods to uncover complex vulnerabilities.
• Document findings with reproduction steps, attack chains, and risk ratings.
• Present results to technical and non-technical stakeholders and drive remediation.

Skills

Penetration testing

Web security testing

Python

Java

Cloud security

LLM security

Burp Suite

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Burp Suite Proxy

AppScan

WebInspect

Nessus

NMAP

OWASP ZAP

Checkmarx

Snyk

Job description

Citi is seeking an Application Security Penetration Tester to join its Offensive Security team in Irving, TX. You will perform deep-dive vulnerability assessments across web apps, APIs, and AI/LLM architectures, translating findings into actionable risk guidance for developers and architects.

The role suits experienced testers or developers transitioning to cybersecurity, with a focus on researching AI/LLM-driven security testing techniques.