AVP, Penetration Tester, LLM

LPL Financial

. Schedule, scope, and execute internal penetration testing focused on LLMs, agentic applications, and supporting APIs .

Posted 9/18/2026full-timeAustin • North Carolina • United StatesLead💰 $128,647 - $214,343 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates advanced expertise in penetration testing of AI and LLM systems, including the development of custom tooling and security assessments against OWASP Top 10 threats. Proven ability to lead end-to-end testing engagements, collaborate with stakeholders, and provide actionable remediation recommendations.

Highest-signal resume keywords

Penetration TestingAI/LLM Security AssessmentTool Development with AIAdvanced Knowledge of OWASPIndustry Certification (OSCP, OSCE, etc.)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingSecurity Assessment ToolsProgramming Languages (.NET, JavaScript, Python, etc.)Advanced Knowledge of OWASPTool Development with AITroubleshooting Code IssuesNetwork Security AssessmentCloud Security (AWS/Azure)Vulnerability IdentificationRemediation Strategies

Soft Skills

Excellent Communication SkillsStrong Organizational SkillsCollaboration with StakeholdersInsatiable Curiosity

Tools & Technologies

Burp SuiteKali LinuxMetasploitNessusCobalt StrikeClaudeHexStrikePromptfooGarakPyrit

Certifications & Qualifications

OSCPOSAIOSCEOSWEGPENGCIHGWAPTGXPN

Industry Keywords

LLM SecurityMCP ServersMITRE ATT&CK FrameworkSoftware Development Lifecycle (SDLC)Agentic ApplicationsCloud-Native ResourcesZero-Day VulnerabilitiesTTPs

Tech Stack

Tools & technologies

AWSAzureCloudJavaJavaScriptKubernetesLinuxMicroservicesPerlPythonRubySDLCGo.NET

About the role

Key responsibilities & impact

Schedule, scope, and execute internal penetration testing focused on LLMs, agentic applications, and supporting APIs
Perform advanced manual penetration testing to validate security of company resources
Serve as point of contact for assigned penetration testing activities
Partner with product stakeholders to drive end-to-end pentesting activities
Work with Security Architects during SDLC processes for LLM/AI to recommend security improvements before production deployment
Conduct tactical security assessments of LLM, agentic applications, and APIs against OWASP Top 10 threats
Provide feedback and recommendations to increase automated capabilities, including AI-assisted tooling
Circumvent security guardrails, identify vulnerabilities, and develop mitigation strategies for AI systems
Track emerging TTPs, zero-days, and remediation strategies for agentic applications and infrastructure
Develop and modify custom tooling using models such as Claude
Document and report testing initiatives, findings, risk ratings, remediation recommendations, and validation results
Present security testing results and remediation guidance to technology teams
Assess internal/external networks, infrastructure, cloud environments, and internally developed and commercial products
Maintain tools and scripts used in agentic penetration testing
Lead assigned AI/LLM penetration testing initiatives and communicate status to leadership
Oversee reporting of findings and perform retesting to validate closure
Develop tooling for agentic-assisted LLM pentesting

Requirements

What you’ll need

5+ years’ experience conducting application/API and network-based penetration-testing engagements
5+ years’ troubleshooting tools, manually finding issues in code, and rewriting code to remove bugs
3+ years’ experience leading penetration testing engagements end-to-end
2+ years' experience pentesting AI/LLM/GenAI applications
2+ years' experience using AI Models such as Claude to rapidly develop tooling
Advanced knowledge with security assessment tools and frameworks, including Burp Suite, Promptfoo, HexStrike, Claude, CAI, Garak, Pyrit, Kali Linux, Nessus, Metasploit, Cobalt Strike, Mitre Atlas, OWASP Top 10 for LLM, and similar
At least one industry certification such as OSCP, OSAI, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN
Excellent communication skills and ability to collaborate with all stakeholders, internal and external
Strong organizational skills
Insatiable curiosity for tinkering with and circumventing security features and controls
Advanced understanding of OWASP, the MITRE ATT&CK framework, Atlas, and the software development lifecycle (SDLC)
Advanced knowledge and experience penetration testing AI/LLM systems including MCP servers, Models, and Chatbots
Advanced understanding of tool development with the use of AI such as Claude Code
Advanced knowledge in programming languages (.NET, JavaScript, Python, Java, PowerShell, Perl, Ruby, Bash, C#, Golang, or similar)
Advanced level knowledge of Linux/Mac/Windows operating systems, AWS/Azure cloud environments, and cloud-native resources (ex. Containers, Kubernetes, microservices, serverless functions)
Breadth and depth of knowledge in security of LLM systems such as MCP servers, models, tooling, and infrastructures
Bachelor’s Degree or equivalent in Information Security, Engineering, or Computer Science is preferred
Valid U.S. work authorization that does not require employer sponsorship

Benefits

Comp & perks

401K matching
Health benefits
Employee stock options
Paid time off
Volunteer time off