Senior AppSec Researcher — AI-Driven Build-and-Break

Commit; Tandil; On-site; ARS 900,000 - 1,500,000; Full time

Job summary

Commit's Security Research group is seeking a senior, hands-on Application Security Researcher to advance modern AppSec, collaborating with engineers, researchers, and AI/data scientists on cutting-edge detection, including autonomous pen-testing capabilities.

This build-and-break role focuses on turning ideas into production-grade tooling across CI/CD, containers, Kubernetes, and cloud services, with a strong background in offensive security and vulnerability research.

Qualifications

• 5+ years hands-on in offensive security, vulnerability research, or application security.
• Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains.
• Strong coding in Python, Go, or similar, with production-quality code shipped.
• Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives.
• Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider.
• Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail.
• Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy.
• Takes research ideas from prototype to production with minimal guidance.
• Clear written communication — can explain a complex attack path to engineers and product managers.
• M.Sc. in Computer Science, Cyber Security, or a related field.

Skills

Offensive security

Web vulnerabilities

Python

Go

Detection rules

CI/CD & containers

LLMs in security

Big data

Communication

Education

M.Sc. in Computer Science / Cyber Security

Tools

Kubernetes

CI/CD

BigQuery

Job description

Commit's Security Research group is seeking a senior, hands-on Application Security Researcher to advance modern AppSec, collaborating with engineers, researchers, and AI/data scientists on cutting-edge detection, including autonomous pen-testing capabilities.

This build-and-break role focuses on turning ideas into production-grade tooling across CI/CD, containers, Kubernetes, and cloud services, with a strong background in offensive security and vulnerability research.