AI-Driven Offensive AppSec Engineer

CommIT; Barcelona; On-site; EUR 60,000 - 100,000; Full time

Job summary

CommIT in Barcelona is seeking a hands-on security researcher to join our Product Security team. You will work with researchers and ethical hackers on offensive security testing, automation, and learning to scale secure-by-design principles across products.

You'll plan and execute advanced penetration tests, develop tools, and contribute to security research publications and CVE submissions. The role requires 4+ years in research and penetration testing, strong coding skills, and experience with

Qualifications

• 4+ years in research and penetration testing.
• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies.
• AI and LLM penetration testing knowledge and experience.
• Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and custom security tools development.
• Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes).
• Familiarity with secure software architecture and typical attack vectors.
• Demonstrated ability to do security testing engagements and report technical findings effectively.
• Experience building or integrating automated PT or fuzzing pipelines is a strong advantage.
• Knowledge and hands-on experience with SSDLC tools and CI/CD pipelines.

Responsibilities

• Help to reshape the company Product Security.
• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing and fuzzing.
• Lead Security innovation by building and managing penetration testing tools and AI Agents.
• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept.
• Identify systemic product weaknesses and help define long-term mitigations.
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
• Contribute to security research publications, CVE submissions, and industry knowledge sharing.
• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.

Skills

Penetration testing

Web security

API security

Cloud-native

Tools

Burp Suite

Metasploit

Job description

CommIT in Barcelona is seeking a hands-on security researcher to join our Product Security team. You will work with researchers and ethical hackers on offensive security testing, automation, and learning to scale secure-by-design principles across products.

You'll plan and execute advanced penetration tests, develop tools, and contribute to security research publications and CVE submissions. The role requires 4+ years in research and penetration testing, strong coding skills, and experience with