Demonstrated hands-on penetration testing and vulnerability assessment experience across applications, APIs, cloud infrastructure, and networks, including identifying and validating real-world attack paths and providing actionable remediation guidance. 3. Assess third-party AI agents through hands-on adversarial security testing, including prompt injection, tool misuse, data access, permissions, external integrations, excessive agency, and sensitive-data exposure.