Hands-on Application Security Pen Tester

VulnU; Irving (TX); On-site; USD 96,000 - 145,000; Full time

Benefits offered by this job

Paid parental leave

Home-office stipend

Equity

Job summary

Citi in Irving, TX is seeking an Application Security Penetration Tester to join the Offensive Security team. You will perform deep-dive assessments of web apps, APIs, mobile apps, and AI/ML-enabled components, identifying exploitable weaknesses and quantifying risk.

The role emphasizes manual testing, crafting POCs, and communicating findings to engineers and architects, with opportunities to advance in offensive security and AI-driven security testing.

Qualifications

• 1–3 years hands-on pen testing or secure development in enterprise settings.
• Experience with dynamic/proxy/network testing tools and static analysis tools listed.
• Familiarity with AI security/adversarial testing concepts is a plus.

Responsibilities

• Conduct manual vulnerability assessments across applications, APIs, and cloud services.
• Develop functional proof-of-concept exploits and document risk with clear remediation guidance.
• Research AI/LLM testing techniques and communicate findings to developers and architects.

Skills

Python

Java

C/C++

Burp Suite

OWASP Top 10

Nessus

NMAP

ZAP

AI security

Education

Bachelor's degree in CS/IT or related

Tools

Burp Suite

AppScan

WebInspect

Nessus

NMAP

OWASP ZAP

Checkmarx

Snyk

Garak

Counterfit

Job description

Citi in Irving, TX is seeking an Application Security Penetration Tester to join the Offensive Security team. You will perform deep-dive assessments of web apps, APIs, mobile apps, and AI/ML-enabled components, identifying exploitable weaknesses and quantifying risk.

The role emphasizes manual testing, crafting POCs, and communicating findings to engineers and architects, with opportunities to advance in offensive security and AI-driven security testing.