Cybersecurity Penetration Testing Expert

About the Role

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10–40 hours/week

This is a fully remote, flexible contract role focused on cybersecurity penetration testing for AI systems. You will identify vulnerabilities in AI-powered applications and infrastructure to improve their security posture.

Key Responsibilities

• Conduct penetration tests against AI-powered applications, APIs, and infrastructure.
• Identify and exploit weaknesses in AI/ML pipelines, including prompt injection, model manipulation, data poisoning vectors, and authentication flaws.
• Perform web application, network, and API security assessments using industry-standard tools and methodologies.
• Simulate real-world attack scenarios, from reconnaissance through exploitation and post-exploitation.
• Document findings in clear, structured reports with severity ratings, evidence, and actionable remediation guidance.
• Evaluate AI-specific attack surfaces including adversarial inputs, jailbreaks, and data exfiltration risks.
• Stay current with emerging AI security threats and contribute insights to improve testing methodologies.
• Work independently on task-based engagements on your own schedule.

Requirements & Tech Stack

• Experienced penetration tester with a strong understanding of offensive security principles and methodologies (OWASP, PTES, MITRE ATT&CK).
• Proficient with industry-standard tools such as Burp Suite, Metasploit, Nmap, Kali Linux, or equivalent.
• Solid understanding of web application security, network security, and API security testing.
• Able to think like an attacker — creative, persistent, and methodical.
• Strong written communication skills to translate technical findings into clear, actionable reports.
• Self-motivated and reliable when working independently.
• Comfortable working across diverse technology stacks and environments.

Nice to Have

• Relevant certifications such as OSCP, OSCE, CEH, GPEN, GXPN, or eWPT.
• Experience with AI/ML security testing — adversarial machine learning, prompt injection, LLM red-teaming.
• Background in red teaming, bug bounty programs, or CTF competitions.
• Familiarity with cloud security (AWS, GCP, Azure) and container security.
• Programming or scripting skills in Python, Bash, PowerShell, or similar.
• Knowledge of secure development practices and DevSecOps workflows.
• Experience conducting security assessments in compliance-driven environments (SOC 2, ISO 27001, etc.).