Cyber-Penetration Tester

As a Cyber Penetration Tester Consultant at an IT Solutions Integrator/Consulting Firm, you will play a vital role in ensuring the security and integrity of our clients' systems. Your primary responsibilities will include: - Assisting in the technical scoping of security testing activities based on client requirements and architecture reviews. - Executing manual penetration testing across multiple domains, including Web Application, Mobile Application, Web Services / API, Network, and Thick Client. - Conducting focused security research during inactive engagements to stay ahead of evolving threats. - Analyzing complex application, infrastructure, and solution architecture designs to identify security weaknesses. - Providing clear and actionable remediation recommendations to stakeholders both verbally and in writing. - Preparing high-quality assessment reports with concise risk articulation and business-relevant recommendations. - Enhancing and updating penetration testing methodologies, processes, playbooks, and standards documentation. - Maintaining technical proficiency through ongoing learning, certifications, and structured training paths. - Communicating the services, capabilities, and value proposition of the penetration testing team effectively to internal and external stakeholders. - Leveraging automation and scripting, including AI-assisted and AI-integrated approaches, to improve testing efficiency and coverage. - Supporting vulnerability research and exploit development activities using AI-enabled techniques. - Performing security testing for LLM-enabled applications and AI systems, including validation of common LLM-related risks and misuse scenarios. Required Qualifications: - Proven experience in manual Web Application Penetration Testing. - Proven experience in manual Mobile Application Penetration Testing. - Hands-on experience in API / Web Services Penetration Testing. - Hands-on experience in Network Penetration Testing. - Hands-on experience in Thick Client Penetration Testing. - Strong understanding of common vulnerabilities, attack techniques, and remediation approaches across application and infrastructure security. - Proficiency in analyzing complex architectures and identifying potential attack paths. - Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non-technical stakeholders. - Ability to provide practical, risk-based, and actionable recommendations to clients. - Experience with security testing tools, manual validation techniques, and scripting/automation to support testing activities. Preferred Qualifications: - Experience with automation and scripting for penetration testing use cases. - Exposure to AI-assisted security testing, AI-supported exploit research, or AI-integrated offensive security workflows. - Experience in LLM security testing, prompt injection testing, model misuse scenarios, and security assessment of AI-enabled applications. - Relevant industry certifications such as OSCP, OSWE, OSEP, GPEN, GWAPT, GMOB, eCPPT, or equivalent. - Familiarity with secure development practices and remediation validation. - Experience working in global delivery models and supporting diverse stakeholder groups. Alignity Solutions is an Equal Opportunity Employer committed to providing a stimulating and rewarding work environment. As a Cyber Penetration Tester Consultant at an IT Solutions Integrator/Consulting Firm, you will play a vital role in ensuring the security and integrity of our clients' systems. Your primary responsibilities will include: - Assisting in the technical scoping of security testing activities based on client requirements and architecture reviews. - Executing manual penetration testing across multiple domains, including Web Application, Mobile Application, Web Services / API, Network, and Thick Client. - Conducting focused security research during inactive engagements to stay ahead of evolving threats. - Analyzing complex application, infrastructure, and solution architecture designs to identify security weaknesses. - Providing clear and actionable remediation recommendations to stakeholders both verbally and in writing. - Preparing high-quality assessment reports with concise risk articulation and business-relevant recommendations. - Enhancing and updating penetration testing methodologies, processes, playbooks, and standards documentation. - Maintaining technical proficiency through ongoing learning, certifications, and structured training paths. - Communicating the services, capabilities, and value proposition of the penetration testing team effectively to internal and external stakeholders. - Leveraging automation and scripting, including AI-assisted and AI-integrated approaches, to improve testing efficiency and coverage. - Supporting vulnerability research and exploit development activities using AI-enabled techniques. - Performing security testing for LLM-enabled applications and AI