Application Security Penetration Engineer

Join Citi's Offensive Security team as an Application Security Penetration Tester. You will conduct in-depth vulnerability assessments across a range of technologies, including web, mobile, APIs, and emerging Generative AI/LLM implementations. This role involves identifying, validating, and exploiting vulnerabilities, then providing clear risk guidance to development teams, with a focus on researching and applying AI-driven security testing techniques.

• Conduct manual vulnerability assessments and penetration testing
• Identify and validate vulnerabilities in applications, APIs, and AI/ML architectures
• Engineer proof-of-concept exploits for identified security weaknesses
• Research and utilize LLM-based security testing techniques
• Document and articulate findings to technical and non-technical audiences
• Propose actionable remediation strategies and controls