Senior AppSec Researcher — Build & Break with AI

CommIT; Buenos Aires; Sur place; ARS 91 242 000 - 182 485 000; Plein temps

Résumé du poste

CommIT in Buenos Aires is seeking a senior, hands-on Application Security Researcher to advance modern AppSec. You'll collaborate with engineers, researchers, and AI/data scientists on next-generation detection, including autonomous, agentic pen-testing capabilities; this is a build-and-break role, not a typical AppSec position.

You will bring 5+ years in offensive security, deep web/app vulnerabilities knowledge, and strong coding in Python or Go, delivering production-quality code while

Qualifications

• 5+ years hands-on in offensive security, vulnerability research, or application security.
• Deep understanding of web application and API vulnerabilities, including business-logic flaws.
• Strong coding in Python or Go with production-ready code.
• Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives.
• Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider.
• Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail.
• Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy.
• Takes research ideas from prototype to production with minimal guidance.
• Clear written communication — can explain a complex attack path to engineers and product managers.

Connaissances

Offensive security

Web/API vulnerabilities

Python or Go

Detection logic (SAST/DAST/SCA)

CI/CD, containers, Kubernetes, Cloud

LLMs/AI for security

Large datasets (SQL/BigQuery)

Prototype to production

Technical writing

Formation

M.Sc. in Computer Science or Cyber Security

Outils

SAST tools

DAST tools

SCA tools

CI/CD tooling

BigQuery

Kubernetes

Cloud providers (AWS/GCP/Azure)

Description du poste

CommIT in Buenos Aires is seeking a senior, hands-on Application Security Researcher to advance modern AppSec. You'll collaborate with engineers, researchers, and AI/data scientists on next-generation detection, including autonomous, agentic pen-testing capabilities; this is a build-and-break role, not a typical AppSec position.

You will bring 5+ years in offensive security, deep web/app vulnerabilities knowledge, and strong coding in Python or Go, delivering production-quality code while