Cybersecurity Expert / Penetration Tester

🛡️ Cybersecurity Expert / Penetration Tester Help redefine how penetration testing is done. Gothenburg, Sweden · Full-time · AI × Cybersecurity 🤖 Shape the future of pentesting Help combine professional offensive security with autonomous AI agents to make security testing more continuous, scalable and effective. 🎯 Work on real security problems Test web applications, APIs, authentication flows and complex business logic. Find vulnerabilities that matter. 🧠 Turn expertise into technology Your experience won't just be used to find vulnerabilities. You'll help teach AI agents how to discover, investigate and validate them. 🔬 Influence the product directly Work closely with engineers and founders. Your findings and ideas can shape what we build and how we build it. ⚡ Build, experiment and break things We're an early-stage startup with short feedback loops, difficult technical challenges and room to challenge conventional approaches. 📈 Grow at the intersection of AI and security Combine hands-on offensive security with AI agents, automation and next-generation application security. 💡 Make your expertise go further Help develop technology designed to bring professional security testing to more applications, more frequently. 🎯 The role We're looking for a hands-on Cybersecurity Expert / Penetration Tester to help build and improve Barrion's AI-powered approach to continuous penetration testing. You'll combine practical security testing with technical investigation, experimentation and product development. Your mission: Help make autonomous penetration testing more effective, reliable and useful in the real world. You'll investigate applications, validate vulnerabilities, evaluate AI-generated findings and help improve how our technology discovers and explains security weaknesses. This isn't just about running scanners and writing reports. You'll help build the technology that changes how security testing can be performed. 🧩 What you'll actually do

• Perform hands-on penetration testing of web applications and APIs
• Investigate authentication, authorisation and business logic vulnerabilities
• Identify complex attack paths and validate real security findings
• Evaluate AI agents performing automated security tests
• Investigate false positives, missed vulnerabilities and testing limitations
• Develop scenarios and workflows that improve automated vulnerability discovery
• Collaborate with engineers to improve testing capabilities
• Translate practical pentesting methodology into repeatable product functionality

🧠 Who we're looking for You have practical offensive security skills, strong technical curiosity and the ability to think beyond a checklist. You probably:

• Have professional experience in penetration testing, offensive security or application security
• Understand web application and API vulnerabilities in depth
• Can reproduce, validate and explain security findings
• Enjoy investigating difficult technical problems
• Are comfortable working independently and collaborating with engineers
• Want to explore how AI and automation can improve security testing

Even better if you have

• Experience with OWASP & WSTG methodologies and complex application testing
• Familiarity with Burp Suite, Caido, Nuclei or similar tools
• Scripting skills in Python, JavaScript or another relevant language
• Practical software engineering experience building security tools or automation
• Experience with browser automation, LLMs or AI agents
• Certifications such as CREST, OSCP, BSCP or OSWE, or equivalent practical experience

We value demonstrated ability and technical judgement over a long list of credentials. 🧬 What kind of person thrives here? You're the person who doesn't stop when a scanner says everything looks fine. You question assumptions, explore unusual behaviours and investigate the details others might miss. You understand that finding a vulnerability is only part of the job. Validating it, understanding its impact and explaining it clearly matter just as much. And when an AI agent attempts a security test, you want to know: What did it miss, why did it miss it, and how do we make it better? 🛡️ About Barrion Barrion is an AI-native cybersecurity company building a new approach to penetration testing. We're developing technology that combines AI agents and automation to test software applications, investigate vulnerabilities and provide evidence-based findings. Our focus is web applications and APIs. Our ambition is simple: Make high-quality security testing continuous and scalable. We're early, which means the people joining now can have a meaningful influence on both the product and the company. 🚀 Why now? AI is opening new possibilities for security testing, but effective autonomous pentesting requires more than connecting an LLM to security tools. It requires sound methodology, contextual reasoning and reliable validation. That's where your expertise matters. Help bridge the gap between what AI can do today and what professional security testing demands. Ready to rethink pentesting? If you're a hands-on security professional who enjoys solving difficult problems and exploring what's possible with AI, we'd love to hear from you. 📍 Gothenburg, Sweden Tell us about the security problems you've solved, the tools you've built or the vulnerabilities you've discovered. No perfect CV required. Show us how you think. 🚀