Senior Application Security Researcher

This is a fully remote position, open to applicants in Serbia.

📋 Description

• Serve as a senior, hands-on Application Security Researcher, enhancing contemporary application security.

• Partner with engineers, researchers, and AI/data scientists to foster collaboration.

• Create next-generation capabilities for vulnerability detection, including autonomous and agentic penetration testing.

• Focus on constructing and deconstructing security solutions rather than engaging in traditional AppSec roles.

• Transition research concepts from prototype stages to production-ready implementations.

⛳️ Requirements

• Over 5 years of practical experience in offensive security, vulnerability research, or application security.

• Profound understanding of web application and API vulnerabilities, including business logic flaws and multi-step attack chains.

• Proficient in coding with Python, Go, or similar languages, delivering production-quality code.

• Experience in developing or refining detection logic (SAST, DAST, SCA, secrets, or custom rule engines) while minimizing false positives.

• Comprehensive knowledge of modern technology stacks, including CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider.

• Practical experience utilizing LLMs / AI models for security purposes, with the ability to evaluate their effectiveness and limitations.

• Comfortable working with large datasets (SQL, BigQuery, or similar) to support research initiatives and assess detection accuracy.

• Ability to take research ideas from prototype to production with minimal oversight.

• Excellent written communication skills—capable of articulating complex attack paths to engineers and product managers.

• Master's degree in Computer Science, Cyber Security, or a related discipline.

• Demonstrated track record of published research, CVEs, conference presentations, or achievements in bug bounty programs.

• Experience in developing AI agents or evaluation frameworks for LLMs.

• Background in exploit development, red teaming, or penetration testing.

• Familiarity with code analysis techniques such as taint analysis, call graphs, and reachability.

• Contributions to open-source security tools.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance plans.

• Opportunities for professional development and continuous learning.

• Flexible work arrangements and a supportive work-life balance.

• Access to cutting-edge technology and resources.