Senior Offensive AppSec Researcher: AI Threat Detection

Jobgether SRL; Schweiz; Remote; CHF 120,000 - 170,000; Full time

Benefits offered by this job

Fully remote work from Europe

Health and pension benefits

Annual wellness days

Job summary

Jobgether SRL in Switzerland is seeking a Staff Security Researcher to lead hands-on research translating vulnerability findings into production-grade detections across web apps, APIs, cloud-native environments, and AI systems.

You will author detection rules with OpenGrep, extend analysis pipelines to more languages, and mentor junior researchers while collaborating with AI/ML, product, and infrastructure teams to deploy and scale security research.

Qualifications

• 8+ years of experience in offensive security or application security research.
• Broad programming knowledge with strong JavaScript skills and Python valued.
• Deep understanding of security principles, standards, and exploitation methodologies.
• Experience writing detection logic for DAST scanners, fuzzers, or related systems.
• Experience designing testing frameworks, evaluation harnesses, or large-scale validation systems.
• Strong web app pentesting experience covering OWASP Top 10 and modern APIs.
• Hands-on with tools like Burp Suite, sqlmap, nmap, ffuf, and custom payloads.
• Fluent English with clear communication; ability to explain complex topics.

Responsibilities

• Create and maintain detection rules using OpenGrep to identify malware and vulnerabilities.
• Extend security analysis capabilities to support more languages in the pipeline.
• Research emerging threats and translate findings into production-ready detections.
• Develop PoC attacks for web apps and APIs, turning research into deployable security capabilities.
• Design attack-chain templates linking findings to exploitation paths.
• Build evaluation harnesses to measure coverage, accuracy, and false positives.
• Triage complex findings from the analysis pipeline and validate results.
• Collaborate with engineering, product, AI/ML, and infra teams to deploy outputs.
• Explore tools and techniques for detecting threats at scale.
• Publish research through blogs, CVEs, advisories, and open-source contributions.

Skills

JavaScript

Python

Security research

Threat detection

Penetration testing

Cross-functional collaboration

Communication skills

Education

Bachelor's or Master's degree in a relevant field

Tools

Burp Suite

sqlmap

nmap

ffuf

OpenGrep

Semgrep

YARA

Job description

Jobgether SRL in Switzerland is seeking a Staff Security Researcher to lead hands-on research translating vulnerability findings into production-grade detections across web apps, APIs, cloud-native environments, and AI systems.

You will author detection rules with OpenGrep, extend analysis pipelines to more languages, and mentor junior researchers while collaborating with AI/ML, product, and infrastructure teams to deploy and scale security research.