Experience leveraging AI-assisted security tools and security automation platforms.
Experience implementing, operating, or scaling continuous security testing, attack simulation, breach and attack simulation, or automated offensive security capabilities.
Experience evaluating, validating, and triaging findings from automated or AI-assisted security testing platforms.
Experience assessing AI-enabled applications, agent-based systems, LLM integrations, or AI security risks.
Familiarity with DevSecOps, CI/CD security controls, and secure software development practices.
Knowledge of OWASP Top 10, API Security Top 10, threat modeling, and secure design principles.
Experience conducting red team, adversarial simulation, or attack path validation exercises.
Knowledge of cloud security architecture and containerized environments.
Experience performing cloud security assessments in AWS, Azure, and GCP environments.
Experience creating custom security testing scripts and automation workflows.
Experience developing proof-of-concept exploits and adversary emulation scenarios.
Familiarity with security control validation and compliance frameworks.
Experience mentoring engineers and contributing to security program maturity.
Experience supporting regulated industries such as healthcare, finance, or other highly regulated environments.
Relevant certifications such as OSCP, OSWE, OSWA, OSAI, HTB CWES, HTB CWEE, OSEP, GPEN, GWAPT or equivalent.