Security Researcher

Description

Accelerate Your Career in Cybersecurity

Pentera is the market leader in AI-native Security Validation, equipping enterprises with the platform to proactively test their defenses against the latest cyber attacks. Pentera proves which exposures are truly exploitable across the entire attack surface and drives remediation workflows that reduce real risk. Anchored in real-attack validation, the Pentera platform powers the full Continuous Threat Exposure Management (CTEM) cycle, from exposure discovery through prioritization, validation, and mobilization. Thousands of security teams around the world trust Pentera to close their security gaps before threat actors can exploit them.

With over 350 team members and 1,300 customers in more than 60 countries, Pentera is a growing company supported by top investors such as Insight Partners, K1, and The Blackstone Group.

If you want to grow your skills, make an impact, and be part of an innovative team, Pentera is the place for you.

About the role:

We're looking for an experienced Security Researcher to join Pentera's R&D organization and work alongside a team of attack-oriented researchers. You'll conduct hands-on offensive security research across multiple domains including Windows internals, kernel-level security, cloud platforms, web technologies, and AI. Your work will directly shape the attack methodologies that power Pentera's automated platform, translating deep technical research into new offensive techniques and AI-driven decision-making capabilities.

Roles and Responsibilities:

• Conduct hands-on offensive security research across AV/EDR evasion, binary exploitation, vulnerability discovery, and subversion of communication channels across OS-level, domain, cloud-native, and external surfaces
• Translate research outputs into production-grade attack functionalities within Pentera's automation ecosystem, working closely with product and engineering teams
• Contribute to the integration of AI-driven decision-making into the platform's automated operations
• Share knowledge, document findings, and contribute to a culture of continuous learning within the team

Requirements

• 4+ years of offensive security research experience: Windows internals, penetration testing, vulnerability research, or red team operations
• Deep knowledge of attack frameworks and tools such as Metasploit, Nmap, Cobalt Strike, Impacket, Burp, Pacu
• Proficiency in reverse engineering and debugging (IDA, Radare2, WinDBG) for low-level research
• Familiarity with cloud ecosystems, specifically AWS and Azure
• Strong communication skills to document and convey complex research clearly
• Excellent teamwork, adaptability, and quick learning mindset

Nice to have:

• Hands-on development experience in Python, C/C++, or similar languages used in offensive tooling
• Experience applying AI or machine learning concepts to offensive security or automated decision-making
• Red/blue team operations experience

We are an equal opportunity employer and we are committed to building a diverse and talented workforce. We do not discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by applicable law. We welcome candidates from all backgrounds to join us!