Key Responsibilities

- Perform in-depth penetration testing of web applications and APIs, identifying and exploiting vulnerabilities aligned with OWASP Top 10 and OWASP API Security Top 10.
- Conduct specialized security assessments for AI/LLM systems, including analysis of Agentic AI workflows and security considerations related to Model Context Protocol (MCP).
- Utilize tools such as Burp Suite for web and API vulnerability discovery, exploitation, and traffic manipulation during assessments.
- Develop transparent, reproducible proof-of-concept exploits for identified vulnerabilities and provide detailed, practical remediation guidance to clients.
- Leverage vulnerability scanners like Tenable (Nessus) to perform network and application vulnerability assessments, interpreting results to prioritize and validate findings.
- Prepare comprehensive technical reports detailing assessment methodologies, findings, CVSS ratings, and strategic recommendations for various client stakeholders.
- Present assessment results to technical teams and executive audiences, articulating complex security issues and their business impact.




- Collaborate with internal teams to refine offensive security methodologies and contribute to the continuous improvement of AI security testing frameworks.

Requirements
- 2-4 years of hands-on experience in offensive security, specifically in penetration testing.
- BE/Btech degree.
- Demonstrated expertise in Web Application Penetration Testing and API Penetration Testing.
- Solid understanding of common application security vulnerabilities, including OWASP Top 10 and OWASP API Security Top 10.
- Practical experience with AI/LLM Security Testing, encompassing Agentic AI / AI Agent security and an understanding of MCP (Model Context Protocol).
- Proficiency with industry-standard penetration testing tools, including Burp Suite and vulnerability scanners like Tenable (Nessus).
- Ability to articulate technical security concepts and findings clearly in written reports and verbal presentations.
- This is an onsite role based in Gurugram, requiring client-side engagement.

Stay updated on our latest job openings and industry insights by following us on LinkedIn: eSec Forte® Technologies!

📌 AI Security and pentesting (Gurugram)
🏢 eSec Forte® Technologies
📍 Gurugram