Penetration Testing Expert(with AI)

About your role:

As a Penetration Tester, you will assess the security of modern applications and emerging artificial intelligence (AI) enabled workflows through hands-on offensive testing. You will work with application security, engineering, and platform teams to identify real-world exploit paths, validate risk, and improve remediation outcomes. Your work will strengthen the security posture of web, application programming interface (API), mobile, and agentic systems through targeted testing and actionable findings.

What you'll do:

• Perform penetration testing across web applications, APIs, mobile applications, and end-to-end application workflows to identify exploitable security weaknesses.
• Identify and validate vulnerabilities including business logic flaws, authentication and authorization weaknesses, injection issues, and insecure data handling patterns.
• Conduct AI red team exercises to evaluate risks such as prompt injection, misuse scenarios, sensitive data exposure, and unsafe model interactions.
• Assess AI-driven and agentic workflows to identify weaknesses in decision logic, action execution, abuse paths, and control effectiveness.
• Support evaluation and adoption of AI-augmented testing approaches, tools, and repeatable testing methods that improve coverage and efficiency.
• Document findings in clear technical reports, including evidence of exploitability, business impact, and remediation guidance for engineering and security stakeholders.
• Partner with application security and development teams to validate fixes, clarify risks, and improve security testing practices across the software delivery lifecycle.
• Responsibilities listed are not intended to be all-inclusive and may be modified as necessary.

Experience you'll need to have:

• 4+ years of experience in application penetration testing, offensive security, or adversarial security assessments across web, API, and mobile environments.
• Experience identifying and exploiting common application security weaknesses, including vulnerabilities aligned to Open Worldwide Application Security Project (OWASP) Top 10 categories, business logic flaws, and authentication orauthorization issues.
• Experience using penetration testing tools such as Burp Suite or similar platforms to test modern application architectures and workflows.
• Experience evaluating modern application environments, including APIs, distributed services, and cloud-connected application components.
• Experience writing technical findings and remediation guidance based on validated exploitability and measurable security risk.
• Bachelors degree or higher in Cybersecurity, Computer Science, Information Systems, or related field or equivalent combination of education, related experience and/or military experience.

Experience that would be great to have:

• Exposure to AI or large language model security testing, including prompt injection and model misuse scenarios.
• Experience with scripting or automation using Python or similar languages to support security testing workflows.
• OSCP, OSWE, GWAPT, OSAI, or equivalent offensive security certification.
• Experience participating in bug bounty programs or continuous security testing initiatives.

How you'll work:

• This role is on-site Monday through Friday. Fiserv considers in-person collaboration to be an essential part of this role as in-person office experiences help you with your overall onboarding experience and leads to stronger productivity.