Jobs / United States / Humana INC
Penetration Tester 2 - AI & R&D (Remote)
Humana INC · 🇺🇸 Remote Nationwide · Remote
Sponsorship verdict
Sponsorship possible
One solid signal, not two — worth applying, and worth asking about sponsorship early.
- Employer is on a government sponsor recordThe US Department of Labor certified 260 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 130 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- What Humana INC paid sponsored hires in similar roles1 certified filing for “Senior Penetration Tester” (Information Technology Project Managers) in AR: $137k–$137k, median $137k. Most were filed at wage level IV (100%) — 4 lottery entries, ≈61% projected selection odds for cap-subject employers. Source: US Department of Labor LCA disclosure data (Oct 2025 – Jun 2026).
- Confirmed live todayWhen a source last listed this job as open.
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Sponsor Radar — Humana INC
The US Department of Labor certified 260 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 130 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Humana INC →
About the role
Become a part of our caring community Become a part of our caring community and help us put health first We're hiring an early-career penetration tester who already builds and tests AI, small agents, LLM apps, and model guardrails, and wants to become a deeply capable offensive-security practitioner while helping shape how modern testers work with AI. You'll join a specialized offensive-security team working shoulder-to-shoulder with Red Team, Breach & Attack Simulation, and Bug Bounty. You'll perform real penetration testing, learn from experienced practitioners, and explore AI-augmented testing through hands-on engagement work and dedicated Friday research and development time. We support continued growth through Hack The Box Pro Labs and role-based paths, discretionary certification funding, and a conference and training budget What you'll do • Execute authorized penetration tests across web applications, APIs, cloud environments, and internal networks, working under general supervision on standard assignments and seeking senior guidance on complex or novel work. • Operate the team's agentic AI offensive tooling during real engagements to improve coverage, triage, and evidence quality. Validate whether AI-assisted results are accurate and exploitable rather than treating model output as fact. • Help assess AI- and LLM-powered applications for direct and indirect prompt injection, jailbreaks, adversarial behavior, and related risks under senior guidance. Map testing to the OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI Risk Management Framework (NIST AI RMF). • Use dedicated R&D time to reproduce emerging AI-security techniques and prototype lightweight scripts, automations, and AI-assisted testing helpers. • Analyze findings and produce clear reports with repeatable evidence, practical reproduction steps, business impact, and actionable remediation guidance. • Collaborate with senior testers, the Lead, and adjacent offensive-security teams; contribute improvement ideas, flag potential challenges, and grow through feedback and mentorship. Your first 6–12 months • Within 90 days: Complete onboarding, learn our testing practices and rules of engagement, shadow a standard test and then execute defined portions under a senior tester's general supervision, and ship a first small automation or R&D experiment. • Within 6 months: Execute standard engagements under general supervision — escalating unfamiliar, complex, or high-risk work to senior testers — contribute to an AI-augmented testing workflow, and help assess at least one AI- or LLM-powered application. • Within 12 months: Become a dependable contributor on standard and moderately complex tests, working under general supervision within established practices; serve as an early trusted voice on responsible AI-assisted testing; and deliver a couple of useful R&D prototypes or testing improvements. Use your skills to make an impact Why this role, and why here This role is built for someone who learns by doing. You will get hands-on offensive work from day one, dedicated time to experiment, and a front-row seat to the evolution of AI-augmented security testing. You will be mentored by experienced offensive-security practitioners while developing the judgment to distinguish an interesting signal from a defensible finding. Most importantly, your work will help protect the systems and sensitive health information relied upon by millions of people. What we're looking for You do not need to check every box below. We welcome early-career and non-traditional applicants, including self-taught practitioners, career changers, and recent graduates whose labs, internships, open-source work, or project portfolio demonstrate what they can do. You'll need: A b