Senior Penetration Tester: Web & AI-Driven Validation

Cook Systems, Inc.; San Antonio (TX); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical coverage through BCBS

Dental and vision coverage

Life insurance

Flexible Spending Account

401(k) retirement plan

Job summary

Cook Systems is seeking an experienced Information Security Analyst—Senior Penetration Tester to support the automation and scaling of our Bug Bounty program. The selected candidate will validate and triage findings, ingest confirmed issues into our enterprise ticketing system, and help establish processes that enable AI-driven validation and prioritization of findings.

Responsibilities include web app and infrastructure testing, triage using CVSS/DREAD, collaboration with developers to

Qualifications

• Experience web/app and infrastructure penetration testing.
• Ability to triage and contextualize findings with CVSS/DREAD.
• Partner with developers to remediate vulnerabilities and provide secure coding guidance.
• Validate and reproduce bug bounty submissions, identifying FP and duplicates.
• Familiarity with vulnerability management and ticketing platforms (ServiceNow, Jira, Azure DevOps).
• Leverage scripting, automation, APIs or AI-assisted workflows (Python, PowerShell, LLM tooling).
• Certifications such as GPEN, OSCP, PenTest+ or equivalent credentials.

Responsibilities

• Conduct web application and infrastructure penetration testing.
• Validate and reproduce bug bounty submissions and triage findings.
• Triaging findings using industry-standard frameworks (CVSS, DREAD).
• Collaborate with developers to remediate vulnerabilities and guide secure coding.
• Ingest confirmed issues into enterprise ticketing systems.
• Establish processes for AI-driven validation and prioritization of findings.
• Utilize scripting, automation, APIs or AI-driven workflows for efficiency.

Skills

Penetration testing

Bug bounty triage

Vulnerability management

Developer collaboration

Automation scripting

CVSS/DREAD

AI workflows

LLM tooling

GPEN/OSCP/PenTest+

Tools

ServiceNow

Jira

Azure DevOps

Job description

Cook Systems is seeking an experienced Information Security Analyst—Senior Penetration Tester to support the automation and scaling of our Bug Bounty program. The selected candidate will validate and triage findings, ingest confirmed issues into our enterprise ticketing system, and help establish processes that enable AI-driven validation and prioritization of findings.

Responsibilities include web app and infrastructure testing, triage using CVSS/DREAD, collaboration with developers to