Senior Offensive Penetration Engineer for AI Security

Mistral; Montreal (administrative region); On-site; CAD 120,000 - 150,000; Full time

Job summary

Mistral is seeking hands-on Pentesters to join our Offensive Security team. You will run our maturing offensive solution on real client engagements while also hunting for vulnerabilities in Mistral's own systems and in the wild.

This is a unique opportunity to break real client systems, discover 0-days for fun, and help build the AI that automates offensive security at scale. Your work will directly impact clients' security posture and Mistral's defensive capabilities.

Qualifications

• Proven track record delivering high-quality penetration testing results.
• Senior enough to run engagements solo from scoping to delivery.
• Comfortable being client-facing and switching between engagements.
• Experience with AI/ML systems security challenges.
• Willingness to travel to client premises and work on site.

Responsibilities

• Run offensive security engagements from scoping to delivery.
• Triaging output and reducing false positives for high-quality findings.
• Advise clients on deployment and remediation as a trusted security partner.
• Travel to client premises and manage multiple engagements in a pentest cadence.
• Penetration test Mistral's own systems and open-source targets.
• Transfer knowledge to the internal security team and become internal customer first.
• Guide the cyber harness by identifying vulnerabilities it should catch.
• Validate and triage harness output to meet high human tester standards.
• Benchmark human vs agent performance and help close the automation gap.
• Contribute to AI-powered offensive security capabilities.

Skills

Web security

AppSec

Source-code review

Active Directory

Cloud security

CI/CD security

Supply chain security

Client-facing

Job description

Mistral is seeking hands-on Pentesters to join our Offensive Security team. You will run our maturing offensive solution on real client engagements while also hunting for vulnerabilities in Mistral's own systems and in the wild.

This is a unique opportunity to break real client systems, discover 0-days for fun, and help build the AI that automates offensive security at scale. Your work will directly impact clients' security posture and Mistral's defensive capabilities.