AI Security and pentesting

Key Responsibilities
Perform in-depth penetration testing of web applications and APIs, identifying and exploiting vulnerabilities aligned with OWASP Top 10 and OWASP API Security Top 10.
Conduct specialized security assessments for AI/LLM systems, including analysis of Agentic AI workflows and security considerations related to Model Context Protocol (MCP).
Utilize tools such as Burp Suite for web and API vulnerability discovery, exploitation, and traffic manipulation during assessments.
Develop clear, reproducible proof-of-concept exploits for identified vulnerabilities and provide detailed, practical remediation guidance to clients.
Leverage vulnerability scanners like Tenable (Nessus) to perform network and application vulnerability assessments, interpreting results to prioritize and validate findings.
Prepare comprehensive technical reports detailing assessment methodologies, findings, CVSS ratings, and strategic recommendations for various client stakeholders.
Present assessment results to technical teams and executive audiences, articulating complex security issues and their business impact.
Collaborate with internal teams to refine offensive security methodologies and contribute to the continuous improvement of AI security testing frameworks.
Requirements
2-4 years of hands-on experience in offensive security, specifically in penetration testing.
BE/Btech degree.
Demonstrated expertise in Web Application Penetration Testing and API Penetration Testing.
Solid understanding of common application security vulnerabilities, including OWASP Top 10 and OWASP API Security Top 10.
Practical experience with AI/LLM Security Testing, encompassing Agentic AI / AI Agent security and an understanding of MCP (Model Context Protocol).
Proficiency with industry-standard penetration testing tools, including Burp Suite and vulnerability scanners like Tenable (Nessus).
Ability to articulate technical security concepts and findings clearly in written reports and verbal presentations.
This is an onsite role based in Gurugram, requiring client-side engagement.
Stay updated on our latest job openings and industry insights by following us on LinkedIn: eSec Forte® Technologies!

Work arrangement
No