Application Security Penetration Tester

Citi is seeking an Application Security Penetration Tester to join its Offensive Security team, conducting deep-dive vulnerability assessments across web applications, mobile, APIs, and emerging Generative AI/LLM implementations. The role involves manually identifying, researching, and safely exploiting known and zero-day vulnerabilities, then translating technical findings into clear risk guidance for developers and architects. A key focus of the role is researching and applying LLM-based security testing techniques to uncover complex vulnerabilities that evade traditional testing methods.