AI-Driven AppSec Researcher: Autonomous Pen Testing

OX Security; Toronto; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Health Coverage

Unlimited PTO

Birthday/anniversary gifts

Job summary

OX Security is seeking an Application Security Researcher to join our Security Research group in Toronto. You will push the boundaries of modern AppSec, building autonomous, agentic security capabilities and redefining offensive security at scale.

You’ll collaborate with engineers, researchers, and data scientists to design detection engines, measure AI model performance, and ship production-ready security features that protect the AI-driven SDLC.

Qualifications

• M.Sc. in Computer Science, Cyber Security, or a related field.
• 5+ years hands-on experience in offensive security, vulnerability research, or application security.
• Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains.
• Strong coding skills in Python, Go, or a similar language, with production-grade code shipping.
• Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives.
• Solid grasp of CI/CD, containers, Kubernetes, and at least one major cloud provider.
• Hands-on experience using LLMs or AI models for security tasks.
• Comfort working with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy.
• Ability to take a research idea from prototype to production with minimal guidance and to communicate attack paths clearly to engineers and product managers.

Responsibilities

• Research vulnerability chaining, business-logic flaws, and complex attack paths across applications and infrastructure.
• Design and build detection engines and decision-making logic for autonomous security systems.
• Evaluate AI models for application security use cases, measuring where they perform and where they fall short.
• Prototype, build, and ship security capabilities into production environments.
• Analyze large-scale security data to uncover exploitable attack paths and improve detection accuracy.
• Partner with Product, Engineering, and Data teams to shape the next generation of security features.
• Help set the team's research direction and own initiatives end to end, from idea to shipped capability.

Skills

Python

Go

Offensive security

Vulnerability research

Clear written communication

Education

M.Sc. in Computer Science or Cyber Security

Tools

SAST

DAST

SCA

Custom rule engines

CI/CD

Kubernetes

Cloud providers

BigQuery

Job description

OX Security is seeking an Application Security Researcher to join our Security Research group in Toronto. You will push the boundaries of modern AppSec, building autonomous, agentic security capabilities and redefining offensive security at scale.

You’ll collaborate with engineers, researchers, and data scientists to design detection engines, measure AI model performance, and ship production-ready security features that protect the AI-driven SDLC.