SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mistral is seeking experienced Pentesters to join its Offensive Security team. The role combines hands-on penetration testing on real client engagements with internal security research and development of AI-powered offensive security capabilities.
Key Responsibilities:
Client Engagements: Execute penetration tests using Mistral's offensive security solution on real client systems. Scope engagements, run tooling, triage findings to eliminate false positives, and deliver actionable security recommendations. Advise clients on remediation and act as a trusted security partner. Travel to client premises as needed and manage multiple concurrent engagements in a consulting cadence.
Internal Dogfooding & Research: Pentest Mistral's own systems to identify vulnerabilities before the offensive solution reaches maturity. Hunt for vulnerabilities in internal systems, open-source projects, and public targets between client work. Transfer findings to the internal security team and serve as Mistral's first customer for its cyber harnesses.
AI-Powered Offensive Security Development: Leverage real offensive expertise to guide the development of Mistral's AI cyber harness. Validate and triage the harness's output against human pentester standards. Benchmark automated vs. manual testing performance and contribute to closing the gap between AI agents and expert human testers.
Required Qualifications:
- Deep expertise in web application security and source-code review (primary specialization)
- Senior-level capability to independently scope, execute, and deliver complete penetration tests
- Proven track record of delivering high-quality penetration testing results
- Practical experience with AI tools and a nuanced understanding of their capabilities and limitations
- Client-facing skills, comfort with travel, and ability to manage multiple concurrent engagements
- Strong problem-solving abilities and meticulous attention to detail in vulnerability identification
Highly Valued Additional Experience:
- Custom offensive tooling development (builder mindset)
- Published CVEs, GHSAs, or strong bug-bounty track record
- Public recognition: conference talks, CTF achievements, or community contributions
- Strong code review skills across multiple programming languages
- Experience with AI/ML system security and unique attack surfaces
- Contributions to open-source security tools or research
- Secondary specializations: internal/Active Directory testing, cloud security (AWS/GCP/Azure), CI/CD and supply-chain security
