AI Penetration Tester (Contract)

Job Description

WHO WE ARE

\n

Datamtx (www.datamtx.com / formerly Datamatics) established in 1993 is globally HQ'd in Atlanta with a stellar history supporting both Tier 1 and 2 ERP / MES projects including: S/4HANA, JDE, Oracle Cloud ERP, Peoplesoft, Deltek, Infor (M3 / S3 / Syteline / LN / Factory Track / MacPac XE / LX, XA, CPQ), IFS, Deltek, Blackbaud, Ellucian Banner, D365, SysPro, Epicor, Plex, BlackLine, etc..

\n

Our ERP / MES projects cover the gamut of typical implementation but we also support bespoke projects and specialty staffing needs covering: data cleanse, customizations, lift & shift, cloud & data migrations, M&A consolidations, Hypercare and Day 1 support. We are also globally partnered with some of some of the Top Accounting, Advisory and Audit firms.

\n

\n

(Multipler Remote Engagements)

\n

Flexible Hours / Part-time Acceptable

\n

AI Penetration Tester (Contract)\n

DataMTX is seeking AI Penetration Testers to support multiple client engagements through a our partnerships with global audit and tax firms. This role involves assessing the security of AI-powered applications, LLM chatbots, AI agents, Copilot implementations, and multi-agent systems. The ideal candidate has experience with both traditional application/API penetration testing and emerging AI security testing techniques.

\n

\n

Required Skills

\n

\n
• Experience conducting penetration testing engagements

\n

• Knowledge of OWASP LLM Top 10 (required)

\n

• Experience testing one or more of:

\n

• LLM Chatbots

\n

• AI Agents

\n

• Copilot Implementations

\n

• Multi-Agent Systems

\n

• Familiarity with AI attack techniques such as prompt injection, jailbreak testing, sensitive data leakage, system prompt extraction, and agent/tool abuse

\n

\n

Preferred Frameworks

\n

\n
• OWASP GenAI Security Project

\n

• MITRE ATLAS

\n

• NIST AI RMF

\n

• AI Red Teaming Methodologies

\n

\n

Tool Experience Hands-on experience with at least two of the following:

\n

\n
• Burp Suite

\n

• Caido

\n

• Garak

\n

• PyRIT

\n

• Microsoft Counterfit

\n

• Inspect AI

\n

• Promptfoo

\n

• OpenAI Evals

\n

• Giskard

\n

• Custom attack tooling

\n

\n

Engagement Type

\n

\n
• Contract / Consulting

\n

• Remote

\n

• Multiple AI and application security assessment projects available

\n

\n

\n

Nice to Have: OSCP, GPEN, GWAPT, OSWE, AI Security or Red Teaming certifications.