{"id":4023017,"url":"https://alion.io/job/javelincommodities-penetration-tester-ai-security-engineer","title":"Penetration Tester & AI Security Engineer","company":{"id":3727,"name":"Javelincommodities","domain":"javelincommodities.com","url":"https://alion.io/company/javelincommodities","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Copilot Studio","optional":false},{"name":"Linux","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Rest API","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-10T15:53:41Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T15:53:41Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Javelin\nJavelin Global Commodities is a leading global commodities marketing, trading, logistics services and investment firm with head offices in London and wider global offices in New York, Dallas, San Diego, St Louis, Canada, Switzerland, Poland, Dubai, India, Singapore, China and Australia. Javelin was founded in 2015 and now operates across six continents with respect to more than 20 different commodities across thermal coal, metallurgical coal, iron ore, steel scrap, metals, hydrocarbons, freight, softs, and renewables.\nEstablished in 2015, Javelin employs over 200 people and is a unique place to grow your career. We take pride in our values, global reach, meritocratic culture and strong work ethic. Our success over the years has been built on our guiding principles of customer service, creativity, transparency, integrity, and responsibility.\nWhilst our footprint grows, we still foster a small-company atmosphere. We have a flat company structure and encourage collaboration across all seniority levels, teams and locations to generate the best ideas. Javelin has a dedicated strategy to support local and meaningful charities through volunteer days, donation matching, a ‘give as you earn’ scheme and other fundraising activities. We are committed to the wellbeing of our colleagues and organise various social evenings, sports clubs and lunchtime activities. Our London office has on-site gym facilities and a golf/sports simulator. Discover more at http://www.javelincommodities.com/.\nThe Role\nJavelin is looking for a Penetration Tester & AI Security Engineer to join our London Infrastructure team, responsible for identifying and validating security weaknesses across Javelin’s infrastructure, applications and emerging AI capabilities. This is a new role that combines traditional penetration testing with AI security testing, secure AI development and the security assessment of new client-facing solutions. The individual will work closely with Infrastructure, development teams, business stakeholders and external security partners to identify vulnerabilities, demonstrate their potential impact and support their remediation. A key part of the role will be helping Javelin adopt AI technologies securely, including developing approved in-house AI solutions, testing AI security controls, conducting AI red-team exercises and ensuring AI applications and agents operate within clearly defined security and data-access boundaries. There will also be the opportunity to support new client engagements by performing authorised security testing of new platforms, applications and integrations, helping ensure security is built in from initial design through to production. The role is based full time in Javelin’s London office, a short walk from Victoria train and bus station.\nKey Responsibilities Include:\nConduct penetration testing across Javelin’s infrastructure, applications, networks, Active Directory and cloud environments. \nIdentify vulnerabilities, demonstrate their potential impact and work with Infrastructure teams on remediation and retesting. \nPerform authorised security testing of new client-facing platforms, applications and integrations before they go live, and provide security sign-off recommendations. \nSupport the secure development of in-house AI solutions, including AI agents, automation and integrations, using Microsoft Copilot Studio, Azure AI services and other approved platforms. \nEnsure AI solutions follow Javelin’s security, privacy, access-control and data-protection requirements. \nTest AI security controls, including prompt injection, data leakage, excessive permissions and attempts to bypass AI guardrails. \nConduct controlled AI red-team testing to identify weaknesses in AI applications and agents. \nTest that AI systems respect existing user permissions and cannot expose confidential Javelin or client information. \nReview AI identities, API permissions and access to systems such as Microsoft 365, Azure and corporate data. \nHelp develop Javelin’s standards for secure AI development, testing and deployment, and produce clear technical findings and management-level reporting with practical recommendations for remediation. \nRequirements\nSkills and Experience Required\nProven experience in penetration testing across infrastructure, web applications, APIs and cloud environments \nStrong knowledge of Active Directory, Microsoft Entra ID, Microsoft 365, Azure and AWS, as well as networking and Windows/Linux \nExperience with application security tools and concepts such as Burp Suite, OAuth/OIDC, REST APIs and secure development principles \nUnderstanding of AI and large language model security, including prompt-injection testing, AI red teaming, data-leakage and access-control testing, and OWASP AI security guidance \nScripting ability in PowerShell and/or Python; experience with Microsoft Copilot Studio or Azure AI is desirable \nAbility to communicate technical findings clearly and with confidence to all levels of the business. \nBenefits\nAnnual discretionary bonus \n25 days holiday\nCompany pension scheme (10% company contribution)\nPrivate medical scheme with a range of additional wellbeing benefits\nTravel insurance\nIncome protection\nLife insurance (5x salary)\nBike2Work scheme including secure storage and showers\nSeason ticket loan\nOnsite gym","description_format":"text","description_chars":5338,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Wholesale","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-11-10T15:53:41Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["conf:1","win:early"],"computed_at":"2026-11-10T16:58:34Z"},"pay":null,"html_url":"https://alion.io/job/javelincommodities-penetration-tester-ai-security-engineer","json_url":"https://alion.io/job/javelincommodities-penetration-tester-ai-security-engineer.json","meta":{"generated_at":"2026-11-10T16:58:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5025,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3727},"rest":"https://alion.io/mcp/rest/get_company?id=3727"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjavelincommodities-penetration-tester-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjavelincommodities-penetration-tester-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjavelincommodities-penetration-tester-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/javelincommodities-penetration-tester-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjavelincommodities-penetration-tester-ai-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4023017}},{"tool":"search_jobs","arguments":{"company":"javelincommodities.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4023017},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}