Application Security Researcher

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Conduct research on vulnerability chaining, business-logic flaws, and intricate attack pathways within applications and infrastructure.

• Create and implement detection engines and decision-making frameworks for autonomous security systems.

• Assess AI models for application security scenarios, evaluating their strengths and weaknesses.

• Develop, construct, and deploy security functionalities into live environments.

• Analyze extensive security datasets to identify exploitable attack pathways and enhance detection precision.

• Collaborate with Product, Engineering, and Data teams to define the future of security features.

• Contribute to setting the research direction for the team and manage initiatives from conception to delivered capability.

⛳️ Requirements

• Master’s degree in Computer Science, Cyber Security, or a related discipline.

• Over 5 years of practical experience in offensive security, vulnerability research, or application security.

• In-depth knowledge of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains.

• Proficient coding skills in Python, Go, or a comparable language, with experience in deploying production-quality code.

• Experience in developing or fine-tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and minimizing false positives.

• Strong understanding of contemporary application and infrastructure environments: CI/CD pipelines, containers, Kubernetes, and at least one major cloud service provider.

• Practical experience with LLMs or AI models for security applications, and the discernment to evaluate their effectiveness.

• Ability to work with large datasets (SQL, BigQuery, or similar) to support research and assess detection accuracy.

• Capability to transform a research concept from prototype to production with minimal oversight.

• Excellent written communication skills: able to articulate a complex attack pathway to engineers and product managers.

🏝️ Benefits

• Opportunity to work with cutting-edge technology in the security domain.

• Collaborative work environment with cross-functional teams.

• Professional development and learning opportunities.

• Competitive salary and comprehensive benefits package.