28 days ago
Base Salary
$168k - $210k/yr
Responsibilities
- Perform application penetration testing across web applications, APIs, and thick clients.
- Conduct internal, external, and cloud-service penetration testing across AWS, Azure, and GCP.
- Perform threat modeling, source-code reviews, and triage of SAST, SCA, IAST, and DAST findings.
- Partner with engineering teams to prioritize and remediate vulnerabilities and integrate security best practices into development processes.
- Produce high-quality assessment reports, presentations, and operating procedures.
- Develop repeatable penetration-testing methodologies and a proactive security assessment roadmap.
- Leverage AI and MCP to create context-aware security guidance and automation.
- Triage security incidents when needed and mentor junior teammates.
Requirements
- 5+ years of relevant penetration testing, product security, and application security experience.
- 2+ years securing Java, Python, and/or JavaScript web applications.
- Strong working knowledge of at least two programming or scripting languages.
- Experience with advanced security tools, real-world attack simulation, and security assessments of containerized cloud environments.
- Familiarity with OSSTMM, OWASP, SAMM, NIST Special Publications, and PTES.
- Experience testing against PCI, FISMA, HIPAA, FedRAMP, or HITRUST compliance frameworks.
- Experience with AI security tooling, context-aware SSDLC automation, collaborative agentic AI systems, and AI privacy and governance in developer workflows.
- Demonstrated proficiency using AI tools such as Claude, Gemini, ChatGPT, or Copilot to solve business challenges or streamline workflows.
- Bachelor’s degree or equivalent certification and related working experience.
- Relevant security certifications such as OSCP, OSWE, or CRTP are strongly preferred.
- Experience with red team or purple team operations and familiarity with the EU AI Act, SAIF, and ISO 42001 are preferred.
- The position is not eligible for visa sponsorship.
Benefits
- Base compensation is supplemented by bonus potential and equity for eligible roles.
- Benefits include a Flex Fund monthly stipend, pension/401k plans, health coverage, and paid time off.
- Collibra offers flexible benefits designed to support employees and their families across different needs and life events.
- The company provides inclusion, belonging, and workplace accommodation programs.
Categories
About Collibra
Collibra is the enterprise AI control plane. Built over eighteen years of ontology engineering, it governs context and control across any data, any model, any agent — for AI leaders who need certainty at the speed of AI. A 5x Forrester Wave Leader and 2x Gartner Magic Quadrant Leader, Collibra serves more than 700 customers — including 78 of the Fortune 500 — and governs more than 2 billion assets. Headquartered in New York City and Brussels, our co-founders Felix Van de Maele and Stijn Christiaens had a vision to help organizations maximize the value of their data and AI programs. Today, Collibra is making that vision a reality.