Senior Penetration Tester - Security Assurance Section (RMI Telecommunication Security Supervisory Dep)

Job Description: About Organization At Rakuten Mobile Security Assurance, you will help secure one of the world's most advanced cloud-native telecom networks, protecting millions of customers across digital, mobile, cloud, and AI-driven services. We work on cutting-edge offensive security challenges spanning 4G/5G telecom platforms, cloud-native infrastructure, APIs, AI/ML systems, and emerging technologies.

We offer an environment where innovation is encouraged, continuous learning is supported, and security experts are empowered to make a direct business impact. You will work alongside industry-leading engineers, build next-generation security capabilities, leverage AI to transform security testing, and contribute to protecting critical telecommunications infrastructure at scale.

Job Duties Comprehensive Penetration Testing: Conduct manual and automated testing of web/mobile applications, APIs, cloud platforms, and network infrastructure. AI/ML Security Assessments: Evaluate LLM-based systems, AI agents, RAG implementations, and MLOps pipelines. Identify vulnerabilities such as prompt injection, insecure model integrations, data leakage, and AI supply chain risks.

Telecom Security Testing: Execute security assessments on telecom-specific systems, including BSS/OSS applications, eSIM platforms, subscriber management, and mobile network services. Red Teaming & Adversary Emulation: Support red team exercises, conduct attack path analysis, and perform exploit validation using realistic attacker techniques.

Design & Code Review: Perform source code reviews, secure design reviews, and architecture-level security assessments. Reporting & Remediation: Develop proof-of-concepts, create detailed technical reports, and provide actionable remediation recommendations. Validate fixes through re-testing. Research & Innovation: Research emerging attack techniques, exploit methodologies, and AI-assisted offensive security methods.

Minimum Qualifications

10+ years of hands-on penetration testing and application security experience. Technical Expertise: Deep expertise in web, mobile, API, cloud, infrastructure, and AI security testing. Tooling: Proficiency with Burp Suite, Kali Linux, Metasploit, Blood. Hound, Nmap, Nessus, and modern offensive security frameworks. Scripting/Coding: Strong knowledge of Python, JavaScript, Bash, or Power.

Shell for testing and automation. Cloud/Infrastructure: Proficiency with cloud platforms (AWS, Azure, or GCP) and containerized environments (Kubernetes, Docker).

Preferred Qualifications

Experience with telecom technologies, mobile core networks, BSS/OSS systems, and cloud-native telecom applications. Certifications: OSCP, CRTP, CRTO, OSEP, OSWE, GPEN, GXPN, or equivalent. Specialized Skills: AI/LLM security testing and adversarial machine learning. Red team operations and advanced exploit development.

Bug bounty, vulnerability research, and AI-assisted penetration testing. Languages: English (Overall - 3

• Advanced)