Qureos Mentor

International Turnkey Systems - ITS

<div>
 
 For a
 
 well-known Islamic Bank in Kuwait
 
 , we are hiring an AI Penetration Tester to join VMPT team and lead hands-on security testing for LLM/GenAI, ML, and AI-enabled applications (chatbots, RAG, AI agents, model APIs, and AI-assisted business workflows). The role blends traditional penetration testing + secure code review + vulnerability assessment with AI red teaming focused on modern AI risks such as prompt injection and insecure output handling as documented by OWASP&rsquo;s Top 10 for LLM Applications.
 
 
 Candidate is expected to have experience in assessing
 
 Python-based AI development and Azure AI / Azure OpenAI / Microsoft Foundry-hosted model endpoints
 
 .
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 
 AI / LLM penetration Testing &amp; Red Teaming
 
 
 <ul>
 <li>
 Plan and execute AI penetration tests for LLM/GenAI and ML solutions across the bank (AI apps, AI gateways, model endpoints, orchestration layers, RAG pipelines, plugins/tools).
 </li>
 <li>
 Design test cases aligned to OWASP Top 10 for LLM Applications (e.g., prompt injection, insecure output handling, sensitive info disclosure, supply-chain risks).
 </li>
 <li>
 Perform adversarial testing using threat-informed techniques and references such as MITRE ATLAS (adversary tactics/techniques for AI systems).
 </li>
 <li>
 Validate security of agentic workflows (tool invocation, function calling, permissions, memory, connectors) and verify least privilege + authorization boundaries.
 </li>
 </ul>
 
 
 Automation &amp; Tooling
 
 
 <ul>
 <li>
 Build Python-based test harnesses for repeatable AI security testing (fuzzing prompts, jailbreak suites, regression tests, evaluation scoring).
 </li>
 <li>
 Use and extend PyRIT (Python Risk Identification Tool) or equivalent frameworks to probe for jailbreaks/harms and automate adversarial scanning.
 </li>
 <li>
 Where applicable, leverage Microsoft Foundry capabilities such as the AI Red Teaming Agent (preview) that integrates PyRIT red teaming features.
 </li>
 </ul>
 
 
 Secure code review &amp; AppSec
 
 
 <ul>
 <li>
 Conduct secure code review (particularly Python) for AI application layers: prompt templates, RAG retrieval logic, output post-processing, input validation, secrets handling, authZ checks, and logging.
 </li>
 <li>
 Identify and help fix design flaws enabling data leakage, prompt manipulation, unsafe tool usage, or insecure output flows.
 </li>
 </ul>
 
 
 Traditional PT
 
 
 <ul>
 <li>
 Perform web/API/cloud penetration testing for AI-enabled applications (auth, session, API abuse, SSRF, injection, misconfigurations, secrets).
 </li>
 <li>
 Run vulnerability assessments, triage findings, define severity, and validate remediation (re-test).
 </li>
 </ul>
 
 
 
 
 
 Education and Qualification
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Cybersecurity, Software Engineering, or related discipline.
 </li>
 <li>
 3&ndash;7 years in penetration testing / application security / red teaming.
 </li>
 <li>
 Demonstrated experience testing LLM/GenAI systems (prompt injection, jailbreaks, data exfiltration patterns, agent/tool abuse).
 </li>
 <li>
 Strong hands-on Python for security automation and test harness development.
 </li>
 <li>
 Practical experience with Azure security concepts (identity, networking, secrets, logging) and exposure to Azure AI / Azure OpenAI / Foundry style deployments.
 </li>
 <li>
 Strong report writing, clear communication, ability to work with developers on remediation.
 </li>
 </ul>
 
 
 A Must Certificates (at least one)
 
 
 <ul>
 <li>
 OffSec OSCP / OSCP+
 </li>
 <li>
 GIAC GPEN
 </li>
 <li>
 Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 ISC2 CCSP
 </li>
 </ul>
 
 
 Strongly Preferred
 
 
 <ul>
 <li>
 OffSec OSWE (advanced web exploitation / white-box testing)
 </li>
 <li>
 Burp Suite Certified Practitioner (BSCP)
 </li>
 <li>
 Microsoft Certified: Azure AI Engineer Associate (AI-102) (helps align with Azure AI implementation patterns).
 </li>
 </ul>
 
 
 Tools &amp; Technologies Skills
 
 
 <ul>
 <li>
 Python, Git, CI/CD integration
 </li>
 <li>
 Burp Suite, common PT toolchains (Kali, scanners, API tooling)
 </li>
 <li>
 Azure security controls (identity, key management, logging/monitoring)
 </li>
 <li>
 AI red teaming tooling (e.g., PyRIT / Foundry scans)
 </li>
 </ul>
 
 
</div>

AI Penetration Testing Specialist

<div>
 
 We are looking for a skilled Outsystems Developer (IB/MB) to join a leading Bank in Bahrain. The role involves designing, developing, and deploying web and mobile applications using Outsystems technologies, with a strong focus on banking solutions. The ideal candidate will bring expertise in low-code development, API integration, and DevOps practices, while ensuring high-quality delivery aligned with business and security requirements.
 
 
 
 
 
 Key Responsibilities
 
 <ul>
 <li>
 Develop mobile applications using Outsystems.
 </li>
 <li>
 Build traditional and reactive web applications with Outsystems.
 </li>
 <li>
 Manage application deployment through Outsystems LifeTime DevOps tools.
 </li>
 <li>
 Design and implement user interfaces using CSS, jQuery, and Javascript.
 </li>
 <li>
 Develop and integrate RESTful APIs and SOAP APIs within Outsystems.
 </li>
 <li>
 Perform SQL database development and integration.
 </li>
 <li>
 Review technical service requests and assess business/security changes.
 </li>
 </ul>
 
 
 
 
 Required Qualifications
 
 <ul>
 <li>
 Bachelor&rsquo;s Degree in Computer Science (BE in Computer Science &amp; Engineering).
 </li>
 <li>
 4&ndash;6 years of experience, preferably in Banking and Compliance.
 </li>
 <li>
 Professional Training: Applications Development Outsystems.
 </li>
 <li>
 Professional Qualification: Outsystems LowCode Development.
 </li>
 <li>
 Outsystems application development (Web &amp; Mobile) and SDLC Experience
 </li>
 <li>
 Proficiency in CSS, HTML, Javascript, jQuery, and Databases
 </li>
 <li>
 Understanding of Networking concepts
 </li>
 <li>
 Experience in banking application development
 </li>
 <li>
 Familiarity with Outsystems LifeTime DevOps tools
 </li>
 <li>
 Knowledge of XML, JSON, SoapUI, Postman, and WebService development
 </li>
 <li>
 Certification: Outsystems.
 </li>
 </ul>
 
 
</div>

Outsystems Developer (Banking Sector)

Join International Turnkey Systems - ITS and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

International Turnkey Systems - ITS

About Company

AI Penetration Testing Specialist

Outsystems Developer (Banking Sector)