AI Offensive Testing Specialist

Within the CISO Offensive Security Tribe, the AI Offensive Testing Specialist executes and improves Euroclear’s LLM-supported security-testing activities. As a member of the delivery team, the role performs AI-assisted SAST, DAST, penetration-testing and red-team activities within approved scope, methodology and human-oversight controls.

Working with the AI Offensive Testing Technical Lead, Offensive Security specialists, application teams and platform engineers, the Specialist prepares testing inputs, operates the technical environment, validates outputs and produces reproducible, evidence-rich findings.

Key Accountabilities

• Test Preparation & Secure Execution
  • Prepare approved test scope, application context, source code, endpoints, credentials, test data and prerequisites for LLM-supported assessments.
  • Execute SAST, DAST, penetration-testing and red-team workflows within authorised rules of engagement, access controls and safety constraints.
  • Handle sensitive source code, credentials, testing artefacts and assessment evidence in accordance with defined security and data-handling requirements.
  • Monitor execution, troubleshoot operational issues and escalate technical, safety or scope concerns to the Technical Lead.
• LLM-Supported Testing & Method Improvement
  • Configure and operate approved models, agents, prompts and tools to support reconnaissance, analysis, test generation, hypothesis development and evidence capture.
  • Apply standard test scenarios and compare outputs across approved models or configurations using defined quality, repeatability, duration and resource measures.
  • Capture complete evidence covering target, code or asset location, weakness hypothesis, technical proof, affected paths, remediation proposal and validation status.
  • Propose improvements to prompts, configurations, test cases, datasets and workflows based on practical assessment results.
• Finding Validation & Remediation Support
  • Validate findings for accuracy, code or asset reachability, exploitability, attack paths, affected-component deployment and control effectiveness.
  • Distinguish actionable vulnerabilities from false positives, duplicates, non-reachable code and unsupported hypotheses, escalating complex cases for review.
  • Maintain human validation and obtain explicit approval before intrusive testing or before findings enter risk, remediation and reporting workflows.
  • Explain findings and remediation options to developers, application owners and security teams, and perform retesting to validate corrective actions.
• Assessment Delivery & Lifecycle Integration
  • Deliver assigned LLM-supported scans and tests on time, ensuring outputs are complete, reproducible, technically credible and reviewable.
  • Collaborate with internal specialists and external providers on SAST, DAST, penetration-testing and red-team use cases, prerequisites and rules of engagement.
  • Record validated findings in the required risk, remediation and reporting workflows and maintain supporting evidence through closure.
  • Identify recurring deterministic findings that could become secure patterns, automated tests, SAST rules, detection content or CI/CD quality gates.
• Operationalisation & Team Contribution
  • Follow and help improve runbooks, operating procedures, service controls, authorised scope, approval steps, rollback and testing safeguards.
  • Support environment testing, deployment validation, integration testing, onboarding, monitoring and operational-readiness activities.
  • Document lessons learned, reusable test patterns and technical procedures, and contribute to knowledge sharing and continuous service improvement.

Your Profile

Qualifications & Experience

• At least 3 years in application security, penetration testing, offensive security, security engineering or software engineering within enterprise environments.
• Hands-on knowledge of source-code analysis, SAST, DAST, web and API security testing, penetration testing or red-team techniques.
• Practical experience using LLMs or AI agents for coding, security analysis, automation or structured technical evaluation.
• Ability to assess code and asset reachability, exploitability, attack paths, control effectiveness and remediation options.
• Experience working with secure cloud or containerised environments and handling sensitive source code, credentials and security-assessment data.
• Coding or scripting capability and disciplined use of version control, testing, logging and technical documentation.
• Experience contributing to the operationalisation of an AI, automation or security capability is preferred.

Skills & Competencies

• Application security, offensive security, SAST, DAST, penetration testing, red teaming and vulnerability validation.
• LLM and agent usage, prompt configuration, APIs, Python or equivalent automation, testing methods and evidence capture.
• Web, API, infrastructure, cloud and identity testing; Azure, containers, CI/CD, version control, logging and monitoring.
• OWASP, CWE, CVE, MITRE ATT&CK or ATLAS, secure coding standards and recognised offensive-testing methodologies.
• Professional English; French or another European language is an advantage.

Behavioural

• Acts as a hands-on team contributor who delivers technically credible and reproducible testing outcomes.
• Combines offensive curiosity with disciplined, ethical, controlled and safety-conscious execution.
• Collaborates openly, documents work clearly, seeks review when required and turns practical experience into service improvements.

About the Team

Part of the CISO Offensive Security Tribe, the LLM-supported testing capability combines secure source-code and asset intake, application context, frontier-model orchestration, SAST, DAST, penetration testing, red-team use cases, human validation, remediation support and retesting. The team transforms AI-enabled security-testing research into an operational capability that strengthens Euroclear’s ability to discover and remediate vulnerabilities at scale.

About the organization

As a global critical financial infrastructure, the protection of Euroclear information and assets is fundamental to the company’s business. Security is at the core of our services, firmly embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office (CISO) in charge of putting in place the required controls to adequately and effectively protect our information assets.

About the company

Why join us: Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system.

What We Offer:

• Work closely with inspiring, supportive and engaged colleagues from more than 80 different countries.
• Practice your talents in a highly professional international environment.
• Join a learning and development environment with an emphasis on knowledge sharing and training.
• Competitive salary and comprehensive benefits.

Ways of working

Find your own optimal balance within our hybrid working model, where you can connect at the office 8 days a month and also benefit from remote working.

Great Place to Work for All

We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, ...). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process.

Our values guide how we work together and shape our future: Our mission and values - Euroclear