Senior Application Security Researcher

Brak informacji o wynagrodzeniu

SeniorZdalnie·WarszawaFull-time

#477338·Dodano 4 dni temu·2

Źródło: CommIT

Aplikuj teraz

Tech Stack / Keywords

Python GoSASTDASTSCACI/CD Kubernetes LLM SQL BigQuery

Podsumowanie oferty

The Security Research group is hiring a senior, hands-on Application Security Researcher to advance modern AppSec. You will work with engineers, researchers, and AI/data scientists on next-generation detection, including autonomous, agentic pen-testing capabilities, for a company securing the AI-driven SDLC.

Wymagania

5+ years of hands-on experience in offensive security, vulnerability research, or application security.
Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains.
Strong coding in Python, Go, or similar, with production-quality code shipped.
Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives.
Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider.
Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail.
Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy.
Ability to take research ideas from prototype to production with minimal guidance.
Clear written communication and ability to explain a complex attack path to engineers and product managers.
M.Sc. in Computer Science, Cyber Security, or a related field.

Nice to have:

Published research, CVEs, conference talks, or a bug bounty track record.
Experience building AI agents or evaluation frameworks for LLMs.
Background in exploit development, red teaming, or penetration testing.
Knowledge of code analysis techniques such as taint analysis, call graphs, and reachability.
Contributions to open-source security tools.

Obowiązki

Work with engineers, researchers, and AI/data scientists on next-generation detection.
Push modern AppSec forward, including autonomous, agentic pen-testing capabilities.

CommIT

22 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz