Senior Application Security Researcher

This is a fully remote position, open to applicants in Romania.

📋 Description

• Propel modern application security forward through practical security research.

• Collaborate with engineers, researchers, and AI/data scientists on next-generation detection methodologies.

• Create autonomous, agent-based penetration testing capabilities.

• Employ a build-and-break methodology in application security.

• Transition research concepts from prototype to production.

⛳️ Requirements

• Over 5 years of direct experience in offensive security, vulnerability research, or application security.

• Profound knowledge of web application and API vulnerabilities, including business logic flaws and multi-step attack sequences.

• Proficient coding skills in Python, Go, or similar languages, with production-quality code delivered.

• Proven experience in building or refining detection logic (SAST, DAST, SCA, secrets management, or custom rule engines) while minimizing false positives.

• Strong understanding of contemporary stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud service provider.

• Practical use of LLMs/AI models for security applications, with the discernment to evaluate their effectiveness and limitations.

• Familiarity with large datasets (SQL, BigQuery, or similar) to inform research and assess detection accuracy.

• Capable of advancing research concepts from prototype to production with minimal oversight.

• Excellent written communication skills — able to articulate complex attack paths to engineers and product managers.

• Master’s degree in Computer Science, Cyber Security, or a related discipline.

• Documented research, CVEs, conference presentations, or a successful bug bounty history.

• Experience in developing AI agents or evaluation frameworks for LLMs.

• Background in exploit development, red teaming, or penetration testing.

• Familiarity with code analysis techniques (taint analysis, call graphs, reachability).

• Contributions to open-source security projects.

🏝️ Benefits

• Competitive salary and comprehensive health benefits.

• Opportunities for professional development and continuous learning.

• Flexible work environment with remote work options.

• Engaging company culture with a focus on innovation.