Penetration Tester

ABOUT THE ROLE The Penetration Tester works to execute department activities and deliver high-quality security assessments to a diverse portfolio of high-profile clients. In this role, you will be responsible for the execution of comprehensive security testing across a wide range of industries, utilizing a broad array of tools to discover and mitigate vulnerabilities. As the Penetration Tester, you will provide exceptional technical and creative strategies to help the continued growth of our fast-paced company while operating in an environment free from the pressures of time reporting, chargeability goals, or sales targets. A-LIGN will depend on you as the Penetration Tester to support management, plan and execute sophisticated penetration tests, and ensure the ongoing protection of our clients’ most critical systems and data. REPORTS TO Managing Consultant PAY CLASSIFICATION Full-Time, Exempt RESPONSIBILITIES * Execute internal, external, wireless, and web application pen tests  * Execute social engineering tests, including phishing, vishing, and physical  * Execute vulnerability scans and assessments  * Compile and write client reports  * Navigate the Kali system from the command line only   * Create, modify, move, and write files and documents from the command line only  * Create and write Bash scripts from the command line  * Reimage devices and virtual machines with Kali Linux MINIMUM QUALIFICATIONS EDUCATION * Master’s or Bachelor’s degree in cybersecurity, management information systems, computer science, or relevant discipline EXPERIENCE * At least 2 years of experience performing network and application pen tests CERTIFICATIONS * OSCP certification * Additional relevant pen test certifications preferred SKILLS * Familiarity with a text editor, Nano, Vi, etc  * Knowledge of nMap tool and flag options  * Solid knowledge of networking, creating SSH tunnels, and listening for them on a receiving device  * Ability to meet deadlines with a high degree of motivation  * Thrives in a fast-paced environment  * Excellent communication skills   * Ability to work individually as well as collaboratively   * A high degree of motivation BENEFITS * Healthcare, Dental, and Vision Benefits * Employer Paid Life Insurance and Disability Insurance * EAP - Employee Assistance Program * Pet Insurance * 401(k) Plan with Employer Matching * Competitive Bonus Structure * Tech Allowance * Certification Reimbursement * Personalized Career Coaching * Generous Paid Time Off * Paid Office Closure December 25-January 1 * Vacation Bonus * Summer Hours ABOUT A-LIGN   A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. To learn more, visit a-lign.com.   COME WORK FOR A-LIGN!  Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on LinkedIn.   A-LIGN is an Equal Opportunity Employer. Minorities, women, disabled, and veterans encouraged to apply!

TL;DR: We're looking for a Penetration Tester who lives to break things, ethically. You'll push Lovable's platform to its limits, hunt vulnerabilities across our AI pipelines and user-generated code, and make sure attackers never get there before you do. Why Lovable? Lovable lets anyone and everyone build software with any language. From solopreneurs to Fortune 100 teams, millions of people use Lovable to transform raw ideas into real products - fast. We are at the forefront of a foundational shift in software creation, which means you have an unprecedented opportunity to change the way the digital world works. Over 2 million people in 200+ countries already use Lovable to launch businesses, automate work, and bring their ideas to life. And we’re just getting started. We’re a small, talent-dense team building a generation-defining company from Stockholm. We value extreme ownership, high velocity, and low-ego collaboration. We seek out people who care deeply, ship fast, and are eager to make a dent in the world. What we’re looking for 5+ years of hands-on penetration testing experience across web, mobile, APIs, and cloud infrastructure. Deep expertise in offensive security techniques: OWASP, MITRE ATT&CK, exploit development, privilege escalation, and lateral movement. Experience attacking AI-native products or LLM-integrated systems, including prompt injection, model abuse, and data exfiltration vectors. Strong understanding of cloud environments (GCP, AWS, Cloudflare) and the attack surfaces they introduce. Ability to translate complex findings into clear, prioritised reports that engineering teams can act on immediately. Low ego, high output. You collaborate as naturally as you compete against systems. Bonus: experience with red team operations, supply chain attacks, or mobile security (iOS/Android). Familiarity with SAST/DAST tooling. Background in security research or CVE disclosure. What you’ll do Own offensive security end-to-end: plan and execute penetration tests across Lovable's web platform, mobile surface, APIs, cloud infrastructure, and AI pipelines. Break our AI before others do: probe LLM integrations for prompt injection, jailbreaks, data leakage, and novel attack vectors unique to AI-generated code running in live products. Stress-test user-generated code at scale: identify systemic vulnerabilities introduced when millions of users create and deploy real applications on Lovable. Turn findings into action: work directly with engineering to prioritise, remediate, and verify fixes, closing the loop between discovery and resolution. Raise the security bar org-wide: run internal red team exercises, contribute to threat modelling, and embed an attacker's mindset across the engineering culture. Help make Lovable the most secure AI product in the market. Our Tech Stack Frontend: React and TypeScript Backend: Golang and Rust Cloud: Cloudflare, GCP, AWS, Modal, multiple LLM providers DevOps & Tooling: GitHub Actions, Grafana, OTEL, infra-as-code (Terraform) Data: Clickhouse, Firestore, Spanner, BigQuery And we're always exploring what's next! About your application Please submit your application in English. It’s our company language, so you’ll be speaking lots of it if you join. We treat all candidates equally - if you’re interested, please apply through our careers portal.