Web Application and Artificial Intelligence Security Consultant – Ethical Hacker

Description

Job Summary: Offensive security professional and penetration tester responsible for evaluating the security of a web application incorporating AI components, including ethical hacking and AI risk mitigation. Key Highlights: 1. Lead offensive security testing and AI-powered web application pentesting. 2. Apply advanced methodologies such as OWASP to assess AI-related risks. 3. Opportunity to work on a specialized AI security project. **Web Application and Artificial Intelligence Security Consultant – Ethical Hacker** A contracting company is seeking a specialist in **offensive security and penetration testing** to participate in a security assessment project for a web application integrating artificial intelligence components. **Main Responsibilities** * The professional will be responsible for conducting ethical hacking tests on an authenticated web application, including its modules, APIs, authentication mechanisms, authorization controls, session management, and business logic. They must also assess AI-related risks such as Prompt Injection, sensitive information leakage, model abuse, constraint evasion, and validation of input and output data. * Testing will be performed using black-box and grey-box approaches, applying methodologies including the OWASP Web Security Testing Guide, OWASP Top 10 for LLM Applications, and PTES. The professional must document evidence, classify vulnerabilities using CVSS, formulate remediation recommendations, prepare the technical report, and participate in subsequent retesting. **Required Profile** * Professional, bachelor's degree holder, graduate, or technical specialist in Systems Engineering, Software Engineering, Computer Engineering, Computer Science, Cybersecurity, or related fields. * Proven experience in authenticated web application and API pentesting, Burp Suite usage, OWASP standards, authentication and authorization testing, input validation, business logic vulnerabilities, and technical report writing. * Knowledge or experience in security assessment of applications leveraging artificial intelligence or LLMs is required. Certifications such as BSCP, eWPT, OSCP, OSWA, OSWE, CEH, or similar are highly valued. **Work Mode and Duration** * Project with an initial duration of approximately **three weeks**, primarily remote. On-site attendance will occur only when necessary and after prior coordination. * Testing activities will be conducted Monday through Friday, from 9:00 a.m. to 6:00 p.m. The professional must remain available to participate in retesting of identified vulnerabilities. If selected for the management interview, you will be contacted via WhatsApp or email. Salary: Up to S/.3,500\.00 per month Work Location: Hybrid in Lima, Lima