JFROG: Application Security Engineer (relocation to Barcelona)

The company is described as running critical software with a team that includes researchers and ethical hackers specializing in offensive security testing, automated exploit discovery, and advanced application security research.

• 4+ year experience in Research and penetration testing
• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies
• AI and LLM Penetration testing knowledge and Experience
• Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and Custom Security Tools development
• Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes)
• Familiarity with secure software architecture and typical attack vectors
• Demonstrated ability to do security testing engagements and report technical findings effectively
• Experience building or integrating automated PT or fuzzing pipelines is a strong advantage
• Knowledge and hands-on experience with SSDLC tools and CI/CD pipelines

• Help to reshape the company Product Security
• Plan and execute advanced penetration testing campaigns
• Develop tools and frameworks for scalable security testing and fuzzing
• Lead Security innovation by building and managing penetration testing tools and AI Agents
• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept
• Identify systemic product weaknesses and help define long-term mitigations
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities
• Contribute to security research publications, CVE submissions, and industry knowledge sharing
• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches

Relocation to Barcelona is part of the offer as indicated in the title and workplace type is hybrid with remote option from Poland.