Application Security Research Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Assemble and manage a team of security researchers and penetration testers.

• Contribute to the transformation of the company's Product Security.

• Strategize and implement advanced penetration testing initiatives.

• Create tools and frameworks for scalable security assessments and fuzz testing.

• Drive security advancements by developing and overseeing penetration testing tools and AI solutions.

• Examine vulnerabilities, conduct root cause analyses, and create proofs of concept.

• Detect systemic product vulnerabilities and assist in defining long-term mitigation strategies.

• Work in partnership with engineering teams to replicate, triage, and resolve vulnerabilities.

• Participate in security research publications, CVE submissions, and the sharing of industry knowledge.

• Constantly enhance internal testing capabilities using cutting-edge tools and AI-assisted methodologies.

⛳️ Requirements

• Minimum of 2 years of proven experience in leading application security research teams (in a SaaS or software company).

• At least 7 years of experience in research and penetration testing.

• Strong programming skills with a comprehensive technical understanding of web, API, cloud-native, and backend technologies.

• Knowledge and experience in AI and LLM penetration testing.

• Familiarity with penetration testing tools (such as Burp Suite, Metasploit, etc.) and the development of custom security tools.

• Understanding of modern architectures, encompassing cloud, microservices, containers, and Kubernetes.

• Knowledge of secure software architecture and common attack vectors.

• Proven ability to lead security testing projects and effectively communicate technical findings.

• Familiarity and practical experience with SSDLC tools and CI/CD pipelines.

🏝️ Benefits

• No benefits or compensation extras are specified.