Conduct in-depth penetration tests on web applications, APIs, microservices , and internal SaaS components.
Perform manual vulnerability discovery and exploitation following OWASP methodologies.
Simulate adversarial attack scenarios and participate in RED Team exercises.
Conduct cloud-focused penetration tests and configuration reviews (AWS, OCI and Azure).
Test LLM/AI features for prompt injection, jailbreaking, data leakage, model manipulation, and other emerging threats.
Develop custom proof-of-concept exploits where applicable.
Work closely with engineering and product teams to provide clear remediation guidance.
Create clear, detailed technical reports with reproduction steps and exploit evidence.
Present findings to technical and leadership teams.
Contribute to threat models and risk assessments.

3+ years of hands-on experience in cybersecurity , with a focus on penetration testing.
Strong understanding of OWASP Top 10 and practical experience exploiting them in real-world applications.
Experience testing REST and GraphQL APIs.
Solid understanding of web technologies (HTML, JavaScript, SQL, authentication mechanisms, etc.).
Proven experience performing manual exploitation (not just tool-based scanning).
Experience testing cloud-hosted applications and infrastructure (AWS, OCI and Azure).
Knowledge of modern authentication (OAuth, JWT, SSO, SAML).
AI/LLM Security (Preferred, Not Mandatory)
Experience testing AI/LLM-powered features.
Knowledge of prompt injection, jailbreaks, RAG attacks, model extraction, data leakage vectors.

TVM Analyst

Key skills