Open roleBishop Fox# Penetration TesterRemote, Mexico· REMOTE## About the roleThe pentester performs hands-on testing and source code review, builds realistic exploitation scenarios and validates security controls. Engagements include cloud, mobile, hybrid application and AI/LLM security assessments, ending with technical reports and remediation guidance for clients.### What you will do* Perform hands-on security testing of modern applications* Review source code for vulnerabilities* Develop exploitation scenarios and validate controls* Run cloud, mobile, hybrid and AI/LLM assessments* Deliver technical reports and remediation guidance### What they ask for* 4+ years in application security assessments, pentesting or offensive security* REST API testing (auth flaws, IDOR, injection, business logic)* AWS expertise (IAM, STS, S3, Lambda)* Source code review in Java, C# and Python* Burp Suite, Semgrep,



Git and AWS CLI* Strong written and verbal communication* Must be authorized to work in Mexico without sponsorship* No visa sponsorship### Nice to have* Hardware or embedded security testing* Cloud-native and serverless experience* Consulting or client-facing experience* Certifications or published research* AI/LLM security (prompt injection, RAG risks)## What applying with Rooted meansThis role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.You can read this role without an account. To apply you need a Rooted credential.This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Bishop Fox. Confirm the final details with the original source or during the application process.Posted 2026-05-08

📌 Penetration Tester (México)
🏢 Rootedsec
📍 México