Senior Application Security Researcher

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Advance modern application security by leading next-generation detection research.

• Collaborate closely with engineers, security researchers, and AI/data scientists.

• Create autonomous and agentic capabilities for penetration testing.

• Transform research concepts from prototypes to production with minimal oversight.

• Construct and deconstruct application security solutions to eliminate vulnerabilities at their source.

• Articulate intricate attack pathways to engineers and product managers.

⛳️ Requirements

• Over 5 years of hands-on experience in offensive security, vulnerability research, or application security.

• Profound knowledge of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains.

• Proficient coding skills in Python, Go, or similar languages, with a track record of delivering production-quality code.

• Experience in building or fine-tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) while minimizing false positives.

• Strong understanding of modern technology stacks: CI/CD pipelines, containers, Kubernetes, and familiarity with at least one leading cloud provider.

• Practical experience utilizing LLMs/AI models for security-related tasks, with the discernment to assess their effectiveness and limitations.

• Proficient in handling large datasets (SQL, BigQuery, or similar) to support research and evaluate detection accuracy.

• Ability to take research concepts from prototype to production with minimal guidance.

• Excellent written communication skills — able to clearly explain complex attack paths to engineers and product managers.

• Master’s degree in Computer Science, Cyber Security, or a related discipline.

• Published research, CVEs, conference presentations, or a successful bug bounty history.

• Experience in developing AI agents or evaluation frameworks for LLMs.

• Background in exploit development, red teaming, or penetration testing.

• Familiarity with code analysis techniques (taint analysis, call graphs, reachability).

• Contributions to open-source security tools.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health insurance plans.

• Flexible working hours and remote work options.

• Opportunities for professional development and continuous learning.

• Collaborative and inclusive work environment.