Description The company secures the AI-driven SDLC from prompt to production, unifying development and cloud context to stop vulnerabilities at the source. The Security Research group is hiring a senior, hands-on
Application Security Researcher
to push modern AppSec forward - working with engineers, researchers and AI/data scientists on next-generation detection, including autonomous, agentic pen-testing capabilities. This is a build-and-break role, not a typical AppSec position.
Requirements Must-have skills:
5+ years hands-on in offensive security, vulnerability research, or application security
Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains
Strong coding in Python, Go, or similar, with production-quality code shipped
Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives
Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider
Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail
Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy
Takes research ideas from prototype to production with minimal guidance
Clear written communication - can explain a complex attack path to engineers and product managers
M.Sc. in Computer Science, Cyber Security, or a related field
Nice to have:
Published research, CVEs, conference talks, or a bug bounty track record
Experience building AI agents or evaluation frameworks for LLMs
Background in exploit development, red teaming, or penetration testing
Code analysis techniques (taint analysis, call graphs, reachability)
Contributions to open-source security tools
Senior Application Security Researcher in Warsaw – pracodawca: CommIT
Commit to global technologii usługowej, która dynamicznie rozwija swoją obecność w regionie EMEA, oferując wyjątkowe możliwości rozwoju zawodowego w zespole GCP Cloud Account Executive. Pracując w innowacyjnym i przedsiębiorczym środowisku, będziesz miał szansę na realny wpływ na rozwój działu chmurowego oraz na budowanie długotrwałych relacji z klientami, co sprzyja nie tylko osobistemu rozwojowi, ale także przyczynia się do sukcesu całej organizacji. Oferujemy elastyczne warunki pracy, wsparcie w rozwoju kariery oraz dostęp do najnowszych technologii, co czyni nas doskonałym pracodawcą dla ambitnych profesjonalistów.
