Security Researcher

Terra Security provides agentic AI-powered continuous penetration testing aligned to code changes and evolving attack surfaces, combining a swarm of trained AI agents with human supervision for safety and control. Fortune 500 organizations trust Terra to ensure every attack surface is covered across the web, AI, cloud, internal and external networks.

Terra is on track to become the next breakout cybersecurity company with $38 million raised to date, including a $30 million Series A led by Felicis Ventures with participation from Dell Technologies Capital, Silicon Valley CISO Investments (SVCI), SYN Ventures, LAMA Partners, Underscore VC, and Capital One Ventures.

Summary

As a Senior Security Researcher, you will sit at the intersection of offensive security expertise and product innovation. You will embed real-world offensive methodologies and tradecraft directly into the platform’s architecture. You will work closely with Product and Engineering to design, validate, and operationalize advanced attack techniques within an AI-driven environment, ensuring our platform reflects modern adversarial behavior and cutting-edge research.

What You’ll Do

• Translate real-world attack chains and exploitation techniques into scalable product capabilities that power our AI agents.
• Design and implement solutions for complex security research challenges within an AI-driven, agent-based architecture.
• Partner closely with Engineering and Product teams to define technical requirements and influence roadmap decisions.
• Conduct in-depth research to identify emerging attack techniques, tooling innovations, and automation opportunities.
• Evaluate and sharpen the platform’s offensive capabilities to ensure they remain aligned with the modern, evolving threat landscape.
• Drive innovation initiatives and contribute to internal knowledge sharing and external research publications.
  
  

• 5+ years of hands-on experience in offensive security (Penetration Testing, Red Teaming, or Vulnerability Research).
• Deep knowledge of security research practices, common attack methodologies, and the ability to perform thorough root cause analysis.
• Solid familiarity with modern web application tech stacks, protocols, and cloud architecture.
• Excellent technical writing skills with experience producing high-quality content (blog posts, research papers, or whitepapers).
• High level of English proficiency-fluent in reading, writing, and speaking.
  
  

• Published security research, active bug bounty participation, or registered CVEs.
• Strong coding experience, including scripting (Python/Go) and the development of custom security tools.
• Proven experience working with AI tools and integrating them into daily automation or security workflows.
• The ability to translate technical findings into clear business impact for customers and stakeholders.