Hi All,

Greetings from ValueLabs!!!

We are hiring for Security Tester (AI-Enabled Penetration Tester)

? Location: Hyderabad

? Employment Type: Full time

? Experience: 8+ Years

Please find the required JD below and interested candidates share your resumes to below mentioned mail id:

JD

AI-Enabled Penetration Tester A Day in the Life of an AI-Enabled Penetration Tester Lead and execute advanced penetration testing and offensive security assessments across AI-enabled platforms, SaaS applications, cloud environments, and enterprise infrastructure. Conduct comprehensive security testing of GenAI/LLM-based applications, AI models, agents, APIs, and supporting ecosystems, leveraging the OWASP LLM Top 10 and emerging AI security frameworks. Perform web application penetration testing on cloud-native SaaS platforms, identifying vulnerabilities, exploitation paths, and business logic flaws. Execute red team engagements, adversary simulations, and attack emulation exercises to assess organizational security posture and resilience. Assess cloud security controls, configurations, and attack surfaces across GCP (mandatory), with additional exposure to Azure and AWS environments. Develop and utilize custom security testing tools, scripts, and automation using Python, PowerShell, and Bash to enhance offensive security operations. Identify, exploit, and validate vulnerabilities across applications, APIs, cloud services, containerized environments, and AI systems, providing risk-based remediation recommendations. Collaborate with application, cloud, and DevSecOps teams to improve security posture and incorporate findings into SSDLC processes. Evaluate authentication, authorization, IAM, cryptographic implementations, and network security controls through hands-on testing. Perform threat-led assessments, attack path analysis, and security reviews covering modern architectures including Kubernetes, Docker, and Infrastructure-as-Code deployments.



Drive continuous improvement of penetration testing methodologies, security automation capabilities, and AI security assessment practices. Mentor junior security testers and contribute to the development of offensive security best practices, playbooks, and testing frameworks. Stay current with emerging attack techniques, cloud threats, AI security risks, and offensive security research.

What You'll Need Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field (preferred). 8+ years of hands-on experience in Penetration Testing, Offensive Security, Red Teaming, Vulnerability Assessment, and Security Testing. Strong expertise in Web Application Penetration Testing, particularly for SaaS and cloud-native applications. Proven experience conducting AI security assessments, testing AI/LLM-based applications, and validating controls against OWASP LLM Top 10 risks.

Deep understanding of cloud security, particularly GCP, including IAM, networking, logging, storage, compute, and cloud-native security services; exposure to Azure and AWS is a plus. Strong proficiency in Python, PowerShell, and Bash scripting for offensive tooling, automation, and security testing. Hands-on experience identifying and exploiting vulnerabilities in web applications, APIs, cloud services, and modern application architectures.

Solid understanding of OWASP Top 10, secure coding practices, application security principles, and common attack methodologies.

Experience with SAST, DAST, SCA, threat modeling,



secure code reviews, and SSDLC practices. Strong knowledge of network security, authentication protocols, cryptography, identity and access management (IAM), and web application security controls.

Experience with security automation, vulnerability validation, and offensive security tooling. Excellent communication and report-writing skills, with the ability to clearly articulate technical risks and remediation recommendations to technical and business stakeholders. Relevant certifications such as OSCP, OSWE, CRTO, GPEN, GWAPT, CISSP, or cloud security certifications are highly desirable.

Ability to thrive in a fast-paced, client-facing environment and manage multiple assessments simultaneously. Willingness to support occasional after-hours testing, red team exercises, and critical security initiatives when required. Nice-to-Haves Experience conducting threat modeling and security architecture reviews.

Hands-on experience with Kubernetes Security, Docker Security, and container escape testing techniques. Knowledge of Infrastructure-as-Code (Terraform, CloudFormation, ARM) security assessment and misconfiguration testing.

Experience with Web Application Firewalls (WAFs), API Security Testing, and Zero Trust architectures. Familiarity with Digital Forensics and Incident Response methodologies. Knowledge of Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platforms (CNAPP).

Experience integrating security into DevSecOps and CI/CD pipelines. Understanding of SAMM, ISO 27001, NIST Cybersecurity Framework, and other industry-standard security frameworks.

Experience developing custom offensive security tools, automation frameworks, or AI-assisted security testing capabilities. Technical leadership experience mentoring security professionals and leading complex penetration testing engagements.

📌 Security Analyst (Hyderabad)
🏢 ValueLabs
📍 Hyderabad