Senior Application Security Researcher

About the role

The Security Research group is looking for a senior, hands‑on Application Security Researcher to drive modern AppSec forward. You will collaborate with engineers, researchers and AI/data scientists to create next‑generation detection and autonomous pen‑testing capabilities.

Key responsibilities

• Design and implement advanced application security detection logic, including SAST, DAST, SCA and custom rule engines.
• Work closely with product and engineering teams to translate research prototypes into production‑ready solutions.

Required profile

• 5+ years of hands‑on experience in offensive security, vulnerability research, or application security.
• Deep understanding of web application, API and business‑logic vulnerabilities, including multi‑step attack chains.
• Strong coding ability in Python, Go or similar languages with production‑grade code.
• Experience with CI/CD pipelines, containers, Kubernetes and at least one major cloud provider.
• Hands‑on use of LLMs/AI models for security tasks and ability to evaluate their effectiveness.
• Comfort working with large datasets (SQL, BigQuery or similar) to drive research and measure detection accuracy.

Required skills

• Offensive security and vulnerability research
• Web application and API security
• Python, Go
• SAST, DAST, SCA, custom rule engines
• CI/CD, containers, Kubernetes
• AWS, Azure or GCP
• LLMs / AI models
• SQL, BigQuery