Autonomous Pentesting Engineer

Devoteam
Portugal
Workplace: HybridFull timeFunction: Software EngineeringSkills: ["Critical thinking","Autonomy","Ownership","Experimental mindset"]

Join the Offensive Security Engineering team to build and evolve an autonomous pentesting platform. You’ll design agent-based pentesting workflows, automate lifecycle components, integrate LLMs and security tooling, and ensure production-ready, controllable outputs aligned with OWASP WSTG guidelines, delivering scalable offensive security capabilities in real-world scenarios.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Devoteam
Devoteam
3 months ago

Autonomous Pentesting Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Join the Offensive Security Engineering team to build and evolve an autonomous pentesting platform. You’ll design agent-based pentesting workflows, automate lifecycle components, integrate LLMs and security tooling, and ensure production-ready, controllable outputs aligned with OWASP WSTG guidelines, delivering scalable offensive security capabilities in real-world scenarios.
Location: Portugal
Workplace: Hybrid
Employment Type: Full time · Permanent
Job Function: Software Engineering

Key Responsibilities

  • •Define and evolve the architecture of autonomous pentesting agents
  • •Develop controlled execution pipelines (tasking, tool usage, feedback loops)
  • •Design and improve mechanisms for planning, state management, tool usage orchestration, validation and control of agent execution
  • •Integrate and optimize LLM-based systems within agent workflows
  • •Define and validate tool-calling interfaces and integrations with pentesting tools

Key Requirements

  • •Strong proficiency in Python and experience with APIs and distributed systems
  • •Practical experience with LLMs (usage, integration, limitations) and understanding of agent-based systems
  • •Ability to design complex, non-deterministic systems and handle task decomposition, state management, and tool orchestration
  • •Strong debugging capability and ability to validate system behavior beyond code correctness
  • •Experience with agent frameworks, AppSec background, and security testing automation
Experience:CybersecurityPentestingLLMsAgent-based systemsAPIsDistributed systems
Skills:Critical thinkingAutonomyOwnershipExperimental mindset
Languages:English
Tech Stack:PythonAPIsLLMsAgent frameworksOWASP WSTGSecurity tooling

Company Brief

Devoteam
Devoteam is an IT consulting firm specializing in digital transformation, cloud, cybersecurity, and data solutions for enterprise clients across Europe and the Middle East, combining technology partnerships with management consulting services.
Industry: Consulting
Company Size: Enterprise (1,001+ employees)
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Paris, France
Founded: 1995
WebsiteLinkedIn