Autonomous Pentesting AI Engineer

Devoteam; Lisboa; On-site; EUR 70,000 - 100,000; Full time

Job summary

Devoteam seeks a product-driven engineer to design and evolve an autonomous pentesting platform. You will build agent-based systems, integrate LLMs, and orchestrate tool usage to automate significant parts of the pentesting lifecycle in production environments.

Responsibilities include architecture, task planning, state management, and validating agent behavior within real-world scenarios, ensuring reliability and security alignment with established WSTG practices.

Qualifications

• Strong proficiency in Python.
• Experience with APIs and distributed systems.
• Practical experience with LLMs (usage, integration, limitations).
• Understanding of agent-based systems.
• Ability to design complex, non-deterministic systems.
• Experience with task decomposition and planning.
• State management and execution continuity.
• Tool orchestration.
• Output validation and evidence handling.
• Ability to validate system behavior, not only code correctness.
• Experience with agent frameworks (Desirable).
• Background in Application Security (AppSec) and security testing automation (Desirable).
• Exposure to multiple LLM models and providers (Desirable).

Responsibilities

• Define and evolve the architecture of autonomous pentesting agents.
• Develop controlled execution pipelines (tasking, tool usage, feedback loops).
• Design and improve mechanisms for planning, state management, tool orchestration, and validation of agent execution.
• Integrate and optimize LLM-based systems within agent workflows.
• Define and validate tool-calling interfaces and integrations with pentesting tools.
• Ensure alignment with OWASP WSTG and other methodologies.
• Test and validate agent behavior in real-world scenarios.
• Identify, analyze, and mitigate system failures and edge cases.
• Contribute to internal standards, engineering practices, and design patterns.

Skills

Python

APIs

Distributed systems

LLMs

Agent-based systems

Complex systems design

Task decomposition

State management

Tool orchestration

Output validation

Job description

Devoteam seeks a product-driven engineer to design and evolve an autonomous pentesting platform. You will build agent-based systems, integrate LLMs, and orchestrate tool usage to automate significant parts of the pentesting lifecycle in production environments.

Responsibilities include architecture, task planning, state management, and validating agent behavior within real-world scenarios, ensuring reliability and security alignment with established WSTG practices.