Senior Penetration Tester

Location: Tel Aviv

Winner of the 2025 AWS/Crowdstrike/Nvidia cybersecurity accelerator, Terra Security is the first Agentic-AI powered, continuous penetration testing solution.

Terra is a well-funded, fast-growth AI for cybersecurity startup, based in Tel Aviv and remotely around the United States.

Terra’s platform is powered by a swarm of fine-tuned AI agents with human-in-the-loop oversight, delivering unmatched efficiency, accuracy, and continuous attack surface coverage. It runs thousands of best-in-class tests and crafts tailored, exploit-driven assessments based on each organization's unique business logic and risk profile.

• Edge of technology: Terra leverages the most cutting edge AI technologies to build a first-of-its-kind Agentic AI penetration testing solution.
• Top Talent: Join a world-class, collaborative team of researchers, engineers, AI practitioners, and GTM champions.
• Growth: Ownership, autonomy, and broad exposure at every level of an early-stage, high-growth company.
• High reward - low risk: Terra is very well funded and lives in a large existing category with tremendous upside.
• AI-Native company: At Terra, you’ll work in an AI-native company - from Engineering, through Product, Design, GTM, and Operations, Terra was born in AI and leverages AI-native workflows across the board.

We’re seeking an experienced and highly motivated Senior Penetration Tester to join our team. The ideal candidate will bring strong technical skills, an offensive security mindset, independence, and a curiosity to learn and grow continuously. 

We’re looking for a strong builder who thrives in fast-paced environments and wants to make a real impact in an early-stage startup.

• 3+ years of hands-on experience in Web Application and API Penetration Testing. 
• Strong understanding of common attack methodologies and exploitation techniques.
• Deep knowledge of OWASP Top 10 vulnerabilities and their real-world implications. 
• Proficiency in working with protocols and technologies such as TCP, HTTP, and other client-side/ server-side languages. 
• Practical experience with tools like Burp Suite/Caido and other widely used security testing utilities.
• Excellent skills in writing clear, high-quality security reports, including: Technical findings, actionable remediation guidance. 
• High-level English proficiency – fluent in reading, writing, and speaking.

Nice-to-have

• Coding experience, such as scripting, automation, or secure software development.
• Proven experience working with AI tools and the ability to effectively integrate them into daily automation workflows.
• Ability to understand and communicate the business impact of security findings.
• Experience working with customers.