Pentester, Offensive Forward Deployment Engineer
Remote · ParisEngineeringMid-levelFull-time
Role at a glance
Mid-level offensive security engineer running client pentests and refining AI-driven security tools at Mistral AI.
- →Run offensive security solution on real client engagements
- →Pentest Mistral's own systems and hunt external vulnerabilities
- →Guide and validate AI cyber harness output
- →Travel to client premises for on-site work
- →Benchmark human versus agent performance
Who should apply
Mid-level pentesters who can independently scope and deliver full client engagements. Candidates need strong web or AppSec experience plus source-code review skills and comfort using AI daily. They must be client-facing and ready to switch between external tests and internal vulnerability hunting.
Skills & technologies
web application securitysource code reviewactive directoryawsgcpazureci/cdsupply chain security
Full job description
As published by Mistral AI on their official careers page.
About Mistral
At Mistral AI, we believe in the power of AI to simplify tasks, save time, and enhance learning and creativity. Our technology is designed to integrate seamlessly into daily working life.
We democratize AI through high-performance, optimized, open-source and cutting-edge models, products and solutions. Our comprehensive AI platform is designed to meet enterprise needs, whether on-premises or in cloud environments. Our offerings include le Chat, the AI assistant for life and work.
We are a dynamic, collaborative team passionate about AI and its potential to transform society.
Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between France, USA, UK, Germany and Singapore. We are creative, low-ego and team-spirited.
Join us to be part of a pioneering company shaping the future of AI. Together, we can make a meaningful impact. See more about our culture on https://mistral.ai/careers.
Role summary
We are seeking hands-on Pentesters to join our Offensive Security team. You will be running our maturing offensive solution on real clients engagements while also hunting for vulnerabilities in Mistral's own systems and in the wild. This is a unique opportunity to break real client systems, discover 0-days for fun, and help build the AI that automates offensive security at scale.
Your work will directly impact both our clients' security posture and Mistral's own defensive capabilities. You'll be at the forefront of our offensive security practice, with the chance to shape how AI transforms penetration testing. We welcome offensive security experts at all levels who are passionate about breaking systems and building the tools that make security testing more effective.
What you will do
Client Engagements
• Run our offensive security solution on real client engagements: scoping, executing tooling, and delivering results
• Triaging output and killing false positives to ensure high-quality, actionable findings for clients
• Advise clients through deployment and remediation, acting as a trusted security partner
• Travel to client premises and switch between engagements in a classic pentest consulting cadence
Internal Dogfooding
• Pentest Mistral's own systems, finding vulnerabilities before our offensive solution matures
• Hunt for vulnerabilities internally and on open-source/in-the-wild targets between client engagements
• Transfer knowledge and findings to the forming internal security team
• Act as Mistral's own first customer for our cyber harnesses
Guiding the Harness
• Use real offensive expertise to steer the cyber harness: identify vulnerabilities it should catch
• Validate and triage the harness's output, ensuring it meets the high standards of human pentesters
• Benchmark human vs. agent performance, helping to close the gap between automated and manual testing
• Contribute to the development of AI-powered offensive security capabilities
About you
• Current P0 specialty: web / AppSec + source-code review; also high-value: internal / Active Directory, cloud (AWS/GCP/Azure), CI/CD & supply chain
• Senior enough to run an engagement solo from scoping to delivery
• Uses AI in your workflow with a nuanced view of its capabilities and limitations
• Comfortable being client-facing, mobile, and switching between different engagements
• Proven track record of delivering high-quality penetration testing results
• Strong problem-solving abilities and attention to detail in vulnerability identification
It would be ideal if you also have:
• Build your own offensive tooling (builder mindset that scales your impact)
• Published CVEs / GHSAs or a strong bug-bounty track record
• Conference talks, CTF achievements, or other public recognition in the security community
• Strong code review skills for multiple programming languages
• Experience with AI/ML systems and their unique security challenges
• Contributions to open-source security tools or research
Location & Remote
This role is open to remote in Europe. Ideally you would be based in one of our European offices (Paris, France and London, UK). We strongly believe in the value of in-person collaboration and we encourage going to the office as much as we can (at least 3 days per months) to create bonds and smooth communication. Our remote policy aims to provide flexibility, improve work-life balance and increase productivity.
What we offer
💰 Competitive salary and equity (stock-options)
🧑⚕️ Health insurance
🚴 Transportation allowance
🥎 Sport allowance
🥕 Meal vouchers
💰 Private pension plan
🍼 Generous parental leave policy
🌎 Visa sponsorship
By applying, you agree to our Applicant Privacy Policy.
Location & Remote
This role is primarily based at one of our European offices (Paris, France and London, UK). We will prioritize candidates who either reside there or are open to relocating. We strongly believe in the value of in-person collaboration to foster strong relationships and seamless communication within our team.
In certain specific situations, we will also consider remote candidates based in one of the countries listed in this job posting — currently France & UK. In that case, we ask all new hires to visit our local office:
• for the first week of their onboarding (accommodation and travelling covered)
• then at least 3 days per month
What we offer
💰 Competitive salary and equity
🧑⚕️ Health insurance
🚴 Transportation allowance
🥎 Sport allowance
🥕 Meal vouchers
💰 Private pension plan
🍼 Parental : Generous parental leave policy
🌎 Visa sponsorship
By applying, you agree to our Applicant Privacy Policy.
Related roles
Software Engineer, Infrastructure Reliability
OpenAI
London, UKEngineeringMid-level$255,000 – $405,000
Software Engineer, Infrastructure Reliability at OpenAI — London, UK. Mid-level engineering role on the Applied AI Infrastructure team.
rustkubernetesawsgcp
Solutions Engineering, Ads Solutions
OpenAI
San FranciscoEngineeringMid-level$185,000 – $260,000
Solutions Engineering, Ads Solutions at OpenAI — San Francisco. Mid-level engineering role on the Go To Market team.
gorustawssql
Software Engineer, Internal Applications - Enterprise
OpenAI
Remote · San FranciscoEngineeringInternship$293,000 – $342,000
Software Engineer, Internal Applications - Enterprise at OpenAI — Remote · San Francisco. Intern-level engineering role on the Security team.
rustawsragrest
AI Deployment Engineer, Startups
OpenAI
San FranciscoEngineeringMid-level$198,000 – $280,000
AI Deployment Engineer, Startups at OpenAI — San Francisco. Mid-level engineering role on the Technical Success team.
pythonjavascriptrustjava
Value Engineer, AI Success - San Francisco
OpenAI
San FranciscoEngineeringMid-level$234,000 – $260,000
Value Engineer, AI Success - San Francisco at OpenAI — San Francisco. Mid-level engineering role on the AI Success team.
gorustawsrest
Engineering Manager, Premium
OpenAI
San FranciscoEngineeringLead / Manager$293,000 – $385,000
Engineering Manager, Premium at OpenAI — San Francisco. Lead-level engineering role on the Applied AI Engineering team.
rustawsragsql