Penetration Tester

Description

Terra Security provides agentic AI-powered continuous penetration testing aligned to code changes and evolving attack surfaces, combining a swarm of trained AI agents with human supervision for safety and control. Fortune 500 organizations trust Terra to ensure every attack surface is covered across the web, AI, internal apps, APIs, mobile, networks, and the cloud.

Terra is on track to become the next breakout cybersecurity company with $38 million raised to date, including a $30 million Series A led by Felicis Ventures with participation from Dell Technologies Capital, Silicon Valley CISO Investments (SVCI), SYN Ventures, LAMA Partners, Underscore VC, and Capital One Ventures.

Summary

As a Penetration Tester, you will bring a blend of strong technical skills, an offensive security mindset, and the independence to own complex assessments from start to finish. You will act as a strong builder who thrives in fast-paced environments, making a real impact on the front lines of an early-stage startup. You will be the bridge between traditional expert hacking and our autonomous AI swarm, ensuring our platform reflects the most cutting-edge adversarial tradecraft.

What You’ll Do

• Lead deep-dive penetration tests on Web Applications and APIs, identifying critical vulnerabilities and demonstrating their real-world impact.
• Work closely with our AI research and engineering teams to integrate offensive methodologies into our "AI Swarm" architecture, providing the human-in-the-loop oversight that ensures accuracy.
• Research and develop new exploitation techniques to keep our platform ahead of emerging threats and unique business logic risks.
• Translate technical vulnerabilities into clear, high-quality security reports that provide actionable remediation guidance for our customers.
• Maintain exceptionally high quality control standards, ensuring that our AI-driven assessments meet the rigorous technical benchmarks required by modern enterprises.

Requirements

• 1-2+ years of hands-on experience in Web Application and API Penetration Testing.
• Strong understanding of common attack methodologies, exploitation techniques, and the OWASP Top 10.
• Deep knowledge of networking protocols (TCP/HTTP) and both client-side and server-side languages.
• Practical expertise with Burp Suite, Caido, and other widely used security testing utilities.
• Exceptional skills in writing clear, high-quality security reports, including technical findings and actionable remediation guidance.
• High-level English proficiency-fluent in reading, writing, and speaking.
• A continuous learner who stays ahead of the evolving threat landscape and thrives in a "zero-to-one" environment.

Advantage

• Coding experience (scripting, automation, or secure software development).
• Experience in managing and mentoring other pen-testers.
• Proven experience working with AI tools and the ability to effectively integrate them into daily automation workflows.