About this role
Mission
Develop and evolve an autonomous pentesting platform based on agentic systems, integrated within the Offensive Security domain—specifically the Offensive Engineering and Innovation team—ensuring systems are effective, controllable, and capable of producing relevant and reliable outputs in real-world penetration testing scenarios.
Role Context
This role sits within the Offensive Engineering and Innovation team, responsible for creating new technical capabilities that extend and scale offensive security services.The platform aims to automate significant parts of the pentesting lifecycle, aligned with methodologies such as the OWASP Web Security Testing Guide (WSTG), leveraging agents, LLMs, and integrations with existing security tooling.This is not an isolated experimental initiative. It is a production-oriented capability with direct application in delivery environments.
Responsibilities
Define and evolve the architecture of autonomous pentesting agentsDevelop controlled execution pipelines (tasking, tool usage, feedback loops)Design and improve mechanisms for:PlanningState managementTool usage orchestrationValidation and control of agent executionIntegrate and optimize LLM-based systems within agent workflowsDefine and validate tool-calling interfaces and integrations with pentesting toolsEnsure alignment with established methodologies (e.g., OWASP WSTG)Test and validate agent behavior in real-world scenariosIdentify, analyze, and mitigate system failures and edge casesContribute to internal standards, engineering practices, and design patterns Technical Skills:
Required
Strong proficiency in PythonExperience with APIs and distributed systemsPractical experience with LLMs (usage, integration, limitations)Understanding of agent-based systemsHighly Important
Ability to design complex, non-deterministic systemsExperience with:Task decomposition and planningState management and execution continuityTool orchestrationOutput validation and evidence handlingStrong debugging capability (deep system-level troubleshooting)Ability to validate system behavior, not only code correctnessDifferentiators
Experience with agent frameworksBackground in Application Security (AppSec)Experience with security testing automationExposure to multiple LLM models and providersSoft Skills
Strong critical thinkingAbility to operate in imperfect and evolving systemsExperimental and outcome-driven mindsetStrong focus on control, reliability, and predictabilityHigh autonomy and ownershipSuccess Metrics
Agents produce useful, actionable outputsExecution is predictable and controllableLow rate of unexpected or unsafe behaviorsEffective integration into real pentesting workflowsContinuous system evolution without uncontrolled complexity growth O que oferecemos:
Valorização e acompanhamento do talento;Aposta no desenvolvimento dos nossos colaboradores;Colaboração numa empresa em constante crescimento e evolução; Forte cultura organizacional: colaboração, partilha, flexibilidade, integridade e low ego.Gostarias de te juntar à nossa equipa? Então envia o teu CV.
The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.