Senior AI Security Engineer - App & Cloud Pentesting

absa; Randburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

ABSA Bank Limited is seeking a Senior Application Security Engineer to lead advanced security assessments across web, mobile, APIs, and cloud-native environments. You will design and execute both manual and automated tests, including AI-driven autonomous pentesting platforms.

The role requires deep technical knowledge of OWASP Top 10, business logic exploitation and strong communication to stakeholders. You will mentor junior testers and shape security standards.

Qualifications

• 5+ years of penetration testing experience.
• Deep knowledge of OWASP Top 10 (Web, API).
• Business Logic Exploitation.
• Authentication and session management flows.
• SSRF, RCE, injection flaws.
• Experience with AI assisted penetration testing tools.
• Understanding of LLM-based attacks, prompt injection risks.

Responsibilities

• Conduct advanced penetration testing across web, API, mobile, cloud-native and infrastructure.
• Lead AI-driven autonomous pentesting platforms and optimize testing workflows.
• Provide remediation guidance with practical implementation advice to stakeholders.
• Produce executive and technical reports and mentor junior testers.
• Contribute to internal security standards and processes.

Skills

Penetration testing

OWASP Top 10

Business logic exploitation

Authentication flows

SSRF/RCE/injection

AI-assisted pentesting

LLM-based attacks

Burp Suite

Nmap

Nessus

Metasploit

SAT/DAST tools

MobSF

Frida

Objection

Education

Bachelor's Degree in Physical, Mathematical, Computer and Life Sciences (Required)

Tools

Burp Suite

Nmap

Nessus

Metasploit

MobSF

Frida

Objection

Job description

ABSA Bank Limited is seeking a Senior Application Security Engineer to lead advanced security assessments across web, mobile, APIs, and cloud-native environments. You will design and execute both manual and automated tests, including AI-driven autonomous pentesting platforms.

The role requires deep technical knowledge of OWASP Top 10, business logic exploitation and strong communication to stakeholders. You will mentor junior testers and shape security standards.