Senior Application Security Researcher

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Advance modern application security through practical security research.

• Collaborate with engineers, researchers, and AI/data scientists on innovative vulnerability detection.

• Develop autonomous, agent-based penetration-testing capabilities.

• Create and analyze security solutions from initial prototype to full production.

• Design and refine detection logic across SAST, DAST, SCA, secrets, and custom rule engines.

• Minimize false positives and assess detection accuracy.

• Articulate complex attack paths to engineers and product managers.

⛳️ Requirements

• Over 5 years of hands-on experience in offensive security, vulnerability research, or application security.

• In-depth knowledge of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains.

• Proficient in programming languages like Python, Go, or similar, with experience delivering production-quality code.

• Background in developing or fine-tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives.

• Strong understanding of contemporary technology stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider.

• Practical experience with LLMs/AI models for security applications, with the ability to evaluate their effectiveness.

• Comfortable working with large datasets (SQL, BigQuery, or similar) to conduct research and assess detection accuracy.

• Capable of taking research concepts from prototype to production with minimal supervision.

• Excellent written communication skills—able to clarify complex attack paths to engineers and product managers.

• Master’s degree in Computer Science, Cyber Security, or a related discipline.

• Record of published research, CVEs, conference presentations, or a successful bug bounty history.

• Experience in developing AI agents or evaluation frameworks for LLMs.

• Background in exploit development, red teaming, or penetration testing.

• Familiarity with code analysis techniques (taint analysis, call graphs, reachability).

• Contributions to open-source security tools.

🏝️ Benefits

• Comprehensive health benefits, including medical, dental, and vision coverage.

• Flexible work hours and remote work options.

• Opportunities for professional growth and development.

• Engaging and inclusive company culture.