We're looking for an experienced Penetration Tester to conduct security assessments of our AI-powered SaaS platform, AuditAI.

? Key Responsibilities

- Perform penetration testing of web applications, REST APIs, and authentication systems.
- Identify vulnerabilities including SQL Injection, XSS, CSRF, IDOR, SSRF, broken access controls, and authentication/authorisation weaknesses.
- Assess multi-tenant data isolation, file upload security, and API security.
- Test against OWASP Top 10 and OWASP API Security Top 10.
- Provide clear vulnerability reports with severity ratings, reproducible evidence, and remediation recommendations.
- Conduct retesting to verify security fixes.
- Build exhaustive test-suit

?️ Required Skills & Tools

- Hands-on experience with Burp Suite Professional, OWASP ZAP, Nmap, and Postman.




- Familiarity with tools such as Nuclei, SQLmap, Nikto, and Wireshark.
- Strong understanding of HTTP/HTTPS, JWT, OAuth 2.0, REST APIs, and web application security.
- Experience testing cloud-hosted SaaS applications, preferably on AWS.
- Ability to perform manual penetration testing beyond automated vulnerability scans.

⭐ Preferred

- OSCP, CREST, eWPT, or equivalent practical experience.
- Experience with AWS security assessments and AI/LLM application security.
- Familiarity with OWASP LLM Top 10.

? Location: Remote ⏰ Engagement: Part-time / Fixed-term Contract (3–6 months) / Flexible schedule

📌 Penetration Tester | Remote | Contract (India)
🏢 Stealth Startup
📍 India