Penetration Tester

Stack

Responsibilities

• ▹Perform deep-dive penetration tests on web applications and APIs, identifying complex vulnerabilities that automated tools often miss
• ▹Work alongside the AI agent swarm, providing manual verification, oversight, and creative exploitation logic to enhance the platform's performance
• ▹Research and develop new exploitation techniques to keep the platform ahead of emerging threats and unique business logic risks
• ▹Translate technical vulnerabilities into clear, high-quality security reports that provide actionable remediation guidance for customers
• ▹Contribute to the methodologies and workflows of the growing European hub, collaborating with global teams to maintain a best-in-class testing standard

Requirements

• ▹3+ years of hands-on experience in web application and API penetration testing
• ▹Strong understanding of common attack methodologies, exploitation techniques, and the OWASP Top 10
• ▹Proficiency with networking protocols (TCP/HTTP) and a solid grasp of client-side and server-side languages
• ▹Practical expertise with Burp Suite, Caido, and other industry-standard security testing utilities
• ▹Ability to write clear, professional security reports that balance technical depth with remediation clarity
• ▹High-level English proficiency (fluent in reading, writing, and speaking)

Nice to have

• ▹Experience with Python, Go, or Bash to automate repetitive testing tasks
• ▹OSCP, OSWA, OSWE, or equivalent certifications
• ▹Familiarity with testing in AWS, Azure, or GCP environments
• ▹Interest in or experience with using AI/LLMs to enhance security workflows

About the company

Terra Security provides agentic AI-powered continuous penetration testing aligned to code changes and evolving attack surfaces, combining a swarm of trained AI agents with human supervision. It serves Fortune 500 organizations and has raised $38 million to date, including a $30 million Series A round.