Senior Application Security Researcher

This is a fully remote position, open to applicants in Georgia.

📋 Description

• Engage directly as an Application Security Researcher in a hands-on build-and-break capacity.

• Advance modern application security with innovative detection methods.

• Collaborate with engineers, researchers, and AI/data scientists.

• Create autonomous, agent-driven penetration testing capabilities.

• Transition research concepts from prototype stages to full production.

⛳️ Requirements

• A minimum of 5 years of hands-on experience in offensive security, vulnerability research, or application security.

• Profound knowledge of web application and API vulnerabilities, including business logic flaws and multi-step attack sequences.

• Proficient coding skills in Python, Go, or similar languages, with experience delivering production-quality code.

• Familiarity with constructing or refining detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and minimizing false positives.

• Strong understanding of modern technology stacks, including CI/CD pipelines, containers, Kubernetes, and at least one major cloud service provider.

• Practical experience using LLMs / AI models for security tasks, with the ability to assess their effectiveness and limitations.

• Comfortable working with large datasets (SQL, BigQuery, or similar) to support research and evaluate detection accuracy.

• Capable of advancing research ideas from prototyping to production with limited supervision.

• Excellent written communication skills — able to articulate a complex attack path to engineers and product managers.

• Master’s degree in Computer Science, Cyber Security, or a related discipline.

• Evidence of published research, CVEs, conference presentations, or a successful bug bounty history.

• Experience in developing AI agents or evaluation frameworks for LLMs.

• Background in exploit development, red teaming, or penetration testing.

• Knowledge of code analysis techniques (taint analysis, call graphs, reachability).

• Contributions to open-source security tools.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Flexible work hours and remote work options.

• Opportunities for professional development and continuous learning.

• Collaborative and inclusive team environment.

• Comprehensive health and wellness benefits.