We're looking for an experienced Penetration Tester to conduct security assessments of our AI-powered SaaS platform, AuditAI. ?

Key Responsibilities
• Perform penetration testing of web applications, REST APIs, and authentication systems.
• Identify vulnerabilities including SQL Injection, XSS, CSRF, IDOR, SSRF, broken access controls, and authentication/authorisation weaknesses.
• Assess multi-tenant data isolation, file upload security, and API security.
• Test against OWASP Top 10 and OWASP API Security Top 10.
• Provide clear vulnerability reports with severity ratings, reproducible evidence, and remediation recommendations.
• Conduct retesting to verify security fixes.
• Build exhaustive test-suit ?️ Required Skills & Tools
• Hands-on experience with Burp Suite Professional, OWASP ZAP, Nmap, and Postman.




• Familiarity with tools such as Nuclei, SQLmap, Nikto, and Wireshark.
• Robust understanding of HTTP/HTTPS, JWT, OAuth 2.0, REST APIs, and web application security.
• Experience testing cloud-hosted SaaS applications, preferably on AWS.
• Ability to perform manual penetration testing beyond automated vulnerability scans. ⭐ Preferred
• OSCP, CREST, eWPT, or equivalent practical experience.
• Experience with AWS security assessments and AI/LLM application security.
• Familiarity with OWASP LLM Top 10. ?

Location:
Remote ⏰ Engagement: Part-time / Fixed-term Contract (3–6 months) / Flexible hours

📌 Penetration Tester | Remote | Contract (India)
🏢 Stealth Startup
📍 India