Senior Application Security Researcher
# Senior Application Security Researcher **CommIT** · Argentina · `Remote` · `Full Time` 💼 **Уровень роли:** `Senior` 🕒 **Статус:** *Опубликовано: сегодня* · *Источник: Himalayas (JSON API)* --- ### Top Skills & Match 🎯 **Ключевой стек роли:** `[Application-Security-Researcher]` `[Security-Researcher]` `[Vulnerability-Researcher]` `[Offensive-Security-Engineer]` `[Penetration-Tester]` `[Senior-Application-Security-Engineer]` `[Senior-Security-Researcher]` `[Application-Security-Engineer]` `[Application-Security-Analyst]` `[Application-Security-Specialist]` `[Senior-Security-Testing-Engineer]` --- ### About the Role Description The company secures the AI-driven SDLC from prompt to production, unifying development and cloud context to stop vulnerabilities at the source. The Security Research group is hiring a senior, hands-on Application Security Researcher to push modern AppSec forward — working with engineers, researchers and AI/data scientists on next-generation detection, including autonomous, agentic pen-testing capabilities. This is a build-and-break role, not a typical AppSec position. Requirements Must-have skills: - 5+ years hands-on in offensive security, vulnerability research, or application security - Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains - Strong coding in Python, Go, or similar, with production-quality code shipped - Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives - Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider - Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail - Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy - Takes research ideas from prototype to production with minimal guidance - Clear written communication — can explain a complex attack path to engineers and product managers - . in Computer Science, Cyber Security, or a related field Nice to have: - Published research, CVEs, conference talks, or a bug bounty track record - Experience building AI agents or evaluation frameworks for LLMs - Background in exploit development, red teaming, or penetration testing - Code analysis techniques (taint analysis, call graphs, reachability) - Contributions to open-source security tools Originally posted on Himalayas
- Application-Security-Researcher
- Security-Researcher
- Vulnerability-Researcher
- Offensive-Security-Engineer
- Penetration-Tester
- Senior-Application-Security-Engineer
- Senior-Security-Researcher
- Application-Security-Engineer
- Application-Security-Analyst
- Application-Security-Specialist
- Senior-Security-Testing-Engineer
Наблюдалась 2026-10-08, впервые 2026-10-08, источник — Himalayas (JSON API).