28 days ago
Base Salary
$168k - $210k/yr
Responsibilities
- Perform application penetration testing across web applications, APIs, and thick clients.
- Conduct internal, external, and cloud-service penetration testing across AWS, Azure, and GCP.
- Perform threat modeling and source-code reviews.
- Triage findings from SAST, SCA, IAST, and DAST tools and assist with security incident triage.
- Partner with engineering teams to prioritize and remediate vulnerabilities and integrate security best practices into development processes.
- Build repeatable penetration-testing methodologies and execute independent security assessment engagements.
- Use AI and MCP to create intelligent, context-aware security guidance and automation.
- Develop a proactive security assessment roadmap using threat intelligence.
- Produce assessment reports, presentations, and operating procedures while mentoring junior teammates.
Requirements
- 5+ years of relevant penetration testing, product security, and application security experience.
- 2+ years securing Java, Python, and/or JavaScript web applications.
- Strong working knowledge of at least two programming or scripting languages.
- Experience with advanced security tools and techniques for simulating real-world attacks.
- Familiarity with OSSTMM, OWASP, SAMM, NIST Special Publications, and PTES.
- Experience testing against PCI, FISMA, HIPAA, FedRAMP, or HITRUST compliance frameworks.
- Experience with AI security tooling, context-aware SSDLC automation, AI privacy and governance, and collaborative agentic AI systems.
- Demonstrated proficiency using AI tools such as Claude, Gemini, ChatGPT, and Copilot to solve business challenges or streamline workflows.
- Bachelor’s degree or equivalent certification and related working experience.
- Relevant security certifications such as OSCP, OSWE, or CRTP are strongly preferred.
- Experience with red/purple team operations and security assessments of containerized cloud environments is preferred.
- Familiarity with the EU AI Act, SAIF, and ISO 42001 is preferred.
- This position is not eligible for visa sponsorship.
Benefits
- Competitive total rewards package with bonus potential and equity for eligible roles.
- Flex Fund monthly stipend.
- Pension and 401(k) plans.
- Health coverage and flexible benefits designed to support employees and their loved ones.
- Paid time off and flexible offerings supporting different life circumstances.
- Equal opportunity employer with applicant accommodation support.
Categories
About Collibra
Collibra is the enterprise AI control plane. Built over eighteen years of ontology engineering, it governs context and control across any data, any model, any agent — for AI leaders who need certainty at the speed of AI. A 5x Forrester Wave Leader and 2x Gartner Magic Quadrant Leader, Collibra serves more than 700 customers — including 78 of the Fortune 500 — and governs more than 2 billion assets. Headquartered in New York City and Brussels, our co-founders Felix Van de Maele and Stijn Christiaens had a vision to help organizations maximize the value of their data and AI programs. Today, Collibra is making that vision a reality.