AI engineer for offensive security

A Devoteam Cyber Trust é a unidade especializada em cibersegurança do Grupo Devoteam. Com mais de 800 especialistas localizados na região EMEA, o nosso objetivo é estabelecer a cibersegurança como um facilitador do sucesso dos negócios, em vez de um obstáculo. Utilizamos uma abordagem abrangente de Resiliência Cibernética, Segurança Aplicada e Gestão de Serviços de Segurança para proteger a jornada tecnológica de empresas de grande e média dimensão de todos os setores e indústrias.

• Define and evolve the architecture of autonomous pentesting agents
• Develop controlled execution pipelines (tasking, tool usage, feedback loops)
• Design and improve mechanisms for: Planning, State management, Tool usage orchestration, Validation and control of agent execution
• Integrate and optimize LLM-based systems within agent workflows
• Define and validate tool-calling interfaces and integrations with pentesting tools
• Ensure alignment with established methodologies (e.g., OWASP WSTG)
• Test and validate agent behavior in real-world scenarios
• Identify, analyze, and mitigate system failures and edge cases
• Contribute to internal standards, engineering practices, and design patterns

• Strong proficiency in Python
• Experience with APIs and distributed systems
• Practical experience with LLMs (usage, integration, limitations)
• Understanding of agent-based systems
• Ability to design complex, non-deterministic systems
• Experience with: Task decomposition and planning, State management and execution continuity, Tool orchestration, Output validation and evidence handling
• Strong debugging capability (deep system-level troubleshooting)
• Ability to validate system behavior, not only code correctness
• Strong critical thinking
• Ability to operate in imperfect and evolving systems
• Experimental and outcome-driven mindset
• Strong focus on control, reliability, and predictability
• High autonomy and ownership
• Будет плюсом: Experience with agent frameworks; Background in Application Security (AppSec); Experience with security testing automation; Exposure to multiple LLM models and providers

• Valorização e acompanhamento do talento;
• Aposta no desenvolvimento dos nossos colaboradores;
• Colaboração numa empresa em constante crescimento e evolução;
• Forte cultura organizacional: colaboração, partilha, flexibilidade, integridade e low ego.