Job Description

About us\nOur professional firm boasts over 70 years of experience and is ranked 5th nationally and 9th globally as part of Crowe Global, a network of over 769 offices in 129 countries worldwide. Our prestige, with 19 offices in Mexico, is built on experience, reputation, and the quality of our Audit, Tax, and Consulting solutions, among others. We provide the best advice so our clients can make smart decisions!\nJoin our team as: Senior Web Application Penetration Testing Engineer & Offensive AI\nWhat are we looking for?\n\nWe are seeking a senior security professional with strong hands- on expertise in web application and API penetration testing, combined with AI-assisted security automation. The ideal candidate can identify and validate complex vulnerabilities trough deep manual testing and leverage Python and AI-driven tools to improve testing efficiency, coverage, and accuracy.\n\n\nKey Responsabilities \n\nPerform in depth manual penetration testing testing of web applications, REST APIs, and supporting services.\nIdentify and validate complex vulnerabilities, including broken access control, authentication weaknesses, business logic flaws, injection, and privilege escalation.\nAnalyze application architecture, authentication mechanisms, authorization models, and data flows to identify exploitable security weaknesses.\nUse Burp Suite and other security testing tools to manipulate requests, validate findings, and develop reproducible proofs of concept.\nLeverage approved AI and LLM-based tools to support reconnaissance, vulnerability analysis, test case generation, and attack path identification.\nDevelop and improve Python scripts, prompts, agents, and API integrations to automate repetitive testing tasks and enhace security assessment workflows.\nDocument findings clearly, communicate technical and business impact, and recommend remediation strategies.\n\nRequiered qualifications \n\n5+ years of hands- on experience in application security or penetration testing, including substantial web application ad API testing.\nStrong understanding of HTTP, REST APIs, authentication, authotization, session management, and common web security vulnerabilities.\nPractical experience performing manual penetration testing beyond automated scanners and standard vulnerability checks.\nStrong knowledge of the OWASP Web Security Testing Guide and common application security risks.\nHands-on experience using Burp Suite or equivalent web application security testing tools.\nExperience writing or modifying Python scripts for security testing or automation.\nAbillity to validate vulnerabilities, develop proofs of concept, and communicate technical findings effectively.\n\n\nPreferred Qualifications \n\nExperience using AI-assisted security testing tools, LLM-based security workflows, or offensive security agents.\nExperience developing reusable prompts, automation scripts, or API integrations for penetration testing.\nWhat do we expect from you?\nWe are looking for a detailed- oriented, analytical professional with strong problem-solving skills and hands- on approach security testing \nStrong leadership, communication, and team development skills.\n\nWhat do we offer?\nAttractive and competitive salary, determined based on the candidates experience and executive skills and benefits \nRemote position\nJob stability and an excellent corporate work environment.\nGrowth opportunity and career plan continue within a top-tier global firm.\nIf you meet all the requirements, please share your Resume with us in PDF or Word format.\n\nTogether we will achieve great results!",