Role description

Title: Security Platform Engineer (AI-Powered Pen Testing)

Location: Tampa, Fl (Hybrid 3 Days)

This role requires a senior Hybrid AIPowered Penetration Testing Platform Engineer with deep expertise in the full lifecycle management of enterprise thirdparty security platforms from initial build and certification through integration deployment and ongoing operational management The consultant will own the engineering delivery of a hybrid AIpowered penetration testing platform managing a complex mix of cloud hosted and onpremises infrastructure and application components that together form a highly integrated operationally demanding security capability Given the hybrid and distributed nature of the platform where significant infrastructure and application components are provisioned configured and operated directly by the team within cloud environments cloudnative engineering expertise is a core and nonnegotiable requirement of this role

Key Responsibilities
• Platform Build Certification Onboarding
• Lead the endtoend build and engineering standup of the thirdparty AIpowered penetration testing platform within the enterprise environment including infrastructure provisioning platform configuration and component integration
• Own the technical certification process for the platform including security assessments architecture reviews vendor validation compliance checks and internal technology risk approvals required to certify the platform for enterprise use
• Develop and maintain comprehensive platform build documentation architecture diagrams configuration runbooks and certification evidence packs
• Manage vendor relationships and technical engagement throughout the platform build and certification lifecycle serving as the primary engineering interface with the thirdparty provider
• Integration Engineering
• Design and implement integrations between the penetration testing platform and enterprise security tooling including SIEM SOAR vulnerability management ticketing and reporting systems
• Develop APIs webhooks and data connectors to enable automated finding ingestion routing and workflow orchestration from platform outputs into downstream SOC and security engineering workflows
• Ensure platform integration architecture adheres to enterprise security network and data governance standards
• CloudNative Infrastructure Platform Engineering
• Provision configure and manage the cloudhosted infrastructure components of the hybrid platform across AWS andor GCP including compute networking storage container workloads and IAM using cloudnative engineering practices
• Apply InfrastructureasCode IaC tooling Terraform CloudFormation for repeatable auditable provisioning and configuration management of platform components
• Implement CICD pipelines for platform component deployment update management and configuration drift detection
• Manage containerized platform components using Kubernetes EKSGKE or equivalent ensuring scalability resilience and secure operation of cloudmanaged application layers
• Design and enforce network segmentation private connectivity and leastprivilege IAM controls across all cloudhosted platform components
• Hybrid Platform Operations Management
• Own ongoing operational management of the hybrid platform across both cloudmanaged and onpremises components including health monitoring patching capacity management and incident response
• Develop and maintain operational runbooks ing frameworks and SLASLO definitions for platform availability and performance
• Manage platform upgrades vendor releases and configuration changes through a structured change management process with minimal operational disruption
• Ensure robust backup recovery and business continuity capabilities are in place for all platform components under team management
• AIPowered Penetration Testing Enablement
• Collaborate with red team offensive security and vulnerability management stakeholders to configure and tune the AIpowered penetration testing platform for maximum operational effectiveness within the enterprise environment
• Manage platform scope configuration target onboarding and testing policy governance to ensure safe compliant and effective AIdriven testing operations
• Support the operationalization of platform outputs including findings triage deduplication and integration into vulnerability management and remediation workflows
• Security Compliance Risk Management
• Ensure all platform components cloudhosted and onpremises meet enterprise security standards including encryption at rest and in transit secrets management audit logging and access control
• Support internal and external audits risk assessments and compliance reviews related to the penetration testing platform and its cloud infrastructure footprint
• Maintain a current and accurate risk register for platform operational and security risks escalating and remediating issues in line with enterprise risk appetite