Penetration Tester / Red Teamer

About This Role

This mid-level position involves hands-on penetration testing and red teaming, supporting security testing in customer environments, validating findings from AI agents, and enhancing product and research capabilities. It suits someone who enjoys practical offensive-security work and wants to take on more responsibility alongside experienced security researchers and engineers. You will investigate real vulnerabilities, test their exploitability, and determine if findings represent genuine, reproducible security issues.

Responsibilities

• Conduct penetration tests across customer applications, APIs, and infrastructure, with support on more complex engagements
• Support red-team exercises by investigating attack paths, testing weaknesses, and contributing to exploitation
• Manually validate findings generated by AI agents, distinguishing reproducible vulnerabilities from false positives
• Develop clear proof-of-concept exploits demonstrating exploitability, realistic impact, and the conditions required for an attack
• Produce concise technical reports containing evidence and practical remediation recommendations
• Collaborate with engineers to improve agent behaviour, testing coverage, and the quality of findings
• Turn discoveries into scripts, repeatable test cases, and research inputs
• Work carefully within agreed testing scopes, communicate clearly, and exercise sound judgement when working in customer environments

Requirements

• Hands-on experience in penetration testing, an internal offensive-security team, or substantial bug-bounty research
• A solid understanding of common vulnerabilities and the ability to exploit them manually, including access-control issues, authentication weaknesses, and injection vulnerabilities
• Confidence testing web applications and APIs, alongside experience with infrastructure or cloud environments
• Familiarity with tools such as Burp Suite and Nmap, including the ability to assess and challenge their results
• Ability to write or adapt Python scripts to automate tasks and support security testing
• Strong written communication skills, with the ability to explain findings, reproduce vulnerabilities, and demonstrate their impact
• Curiosity, persistence, and a willingness to seek help when an unfamiliar problem requires a different approach

Nice to have:

• Active Directory
• Privilege escalation
• Cloud security
• Adversary emulation
• Exploit development
• Public security research, useful tooling, or technical write-ups

Benefits

• Opportunity to influence the development of an AI-powered security product directly through practical testing