Penetration Tester: AI-Driven Offensive Security

Deloitte France; St. Louis (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

Deloitte Global is seeking a penetration tester to deliver comprehensive testing services across web, API, AI/LLM, network, mobile, and thick client environments. The role emphasizes building AI-driven testing tools, coordinating with global teams, and providing clear, actionable findings to clients.

Ideal candidates will have experience with Kali Linux and a suite of pentest tools, familiarity with OWASP Top 10, and comfort working with AI models and related tooling.

Qualifications

• Experience with Kali Linux and common pentesting tools listed (Burp, AMASS, Metasploit, Postman, Swagger, NMAP, Qualys, SQLMap).
• Familiarity with OWASP Top 10 weaknesses and vulnerabilities.
• Experience with AI models/frameworks from Anthropic and OpenAI; configuring tools like Obsidian and Ollama.

Responsibilities

• Executing penetration testing engagements across Web, API, AI/LLM, network, mobile, and thick client environments.
• Provide consultative guidance to customers on findings in writing and verbally.
• Enhance and update testing methodologies, processes, and standards documentation.
• Leverage AI/LLM-based tools and prompt engineering to accelerate reconnaissance and generate testing scripts.
• Build, customize, and maintain AI-driven agents to automate recurring testing tasks.
• Validate accuracy and reduce hallucinations/false positives in vulnerability identification.
• Evaluate and integrate emerging AI-assisted offensive security tooling into team playbooks.
• Communicate services and capabilities effectively to clients.

Skills

Kali Linux

Burp Suite Pro

AMASS

Metasploit

Postman

Swagger

NMAP

Qualys

SQLMap

OWASP Top 10

Anthropic / OpenAI models

Obsidian / Ollama

scripting language

at least one programming language

Tools

Obsidian

Ollama

Job description

Deloitte Global is seeking a penetration tester to deliver comprehensive testing services across web, API, AI/LLM, network, mobile, and thick client environments. The role emphasizes building AI-driven testing tools, coordinating with global teams, and providing clear, actionable findings to clients.

Ideal candidates will have experience with Kali Linux and a suite of pentest tools, familiarity with OWASP Top 10, and comfort working with AI models and related tooling.