Penetration Tester (AI-Enabled)

Hudson Manpower is hiring a Penetration Tester (AI-Enabled) for an onsite contract role in Chaska, MN. In this position, you will use AI and GenAI to speed up penetration-testing workflows while performing security assessments across modern environments, including web applications, APIs, networks, cloud platforms, and LLM or AI systems.

This contract opportunity focuses on finding and validating weaknesses, measuring real-world impact through controlled exploitation, and producing security reporting that helps teams remediate effectively. The role also includes security reviews aligned to organizational and industry expectations.

What you will do

• Use AI/GenAI to accelerate penetration-testing activities, including reconnaissance, test-case generation, analysis, scripting, and reporting.
• Perform security testing for web applications, APIs, networks, cloud environments, and other applicable systems.
• Identify, validate, and document security vulnerabilities and weaknesses.
• Run controlled exploitation to evaluate the impact and risk of identified issues.
• Conduct vulnerability assessments using manual and automated testing tools.
• Produce detailed security assessment reports with actionable remediation recommendations.
• Partner with development and infrastructure teams to resolve security issues.
• Carry out security reviews to support compliance with organizational and industry standards.
• Support secure software development practices and promote application security best practices.

Minimum requirements

• 3+ years of experience in penetration testing and vulnerability assessments.
• Experience testing web applications, APIs, networks, and cloud environments.
• Hands-on experience with industry-standard security testing tools and exploit frameworks.
• Ability to identify, validate, document, and remediate security vulnerabilities.
• Knowledge of secure coding practices and application security concepts.
• Experience preparing security assessment reports and presenting findings to stakeholders.
• Understanding of cybersecurity threats, attack methodologies, and defense mechanisms.

AI and LLM security focus

• Assess risks such as prompt injection, insecure model/application interactions, sensitive information exposure, excessive agency, and other LLM application threats.
• Identify attack surfaces across models, data, applications, APIs, RAG pipelines, and AI agents, using frameworks such as MITRE ATLAS.
• Use approved LLM/AI tools for test-case generation, reconnaissance analysis, vulnerability analysis, scripting, and report generation.

Tools and technologies

• Burp Suite Professional, OWASP ZAP, Metasploit, Nessus, Qualys, Nmap, Wireshark, Kali Linux
• Python, PowerShell, Bash/Shell
• OWASP, PTES
• NIST, ISO 27001, PCI-DSS, SOC 2
• AWS, Azure, GCP
• MITRE ATLAS

Preferred certifications

• CEH, OSCP, GPEN, or PNPT

Location: Chaska, MN (onsite) · Compensation: USD 52 - 55 per hour · Engagement type: contract · Experience: minimum 3 years