Offensive Security Engineer - App Security & AI Tools

Commit; Barcelona; Presencial; EUR 65.000 - 100.000; Jornada completa

Descripción de la vacante

Commit is seeking an experienced security researcher to join our offensive security team in Barcelona. You will work with researchers and ethical hackers to test web, API, cloud-native, and backend systems, focusing on offensive security, code exploitation, automation, and innovation.

You will plan campaigns, develop tools, and contribute to security research publications, reporting findings and helping scale secure-by-design principles across our products.

Formación

• 4+ years of experience in research and penetration testing.
• Strong coding skills and deep understanding of web, API, cloud-native, and backend tech.
• AI/LLM penetration testing experience.
• Experience with Burp Suite, Metasploit, and custom tools.
• Familiar with cloud, microservices, containers, Kubernetes.
• Knowledge of secure software architecture and attack vectors.
• Ability to report technical findings effectively.
• Experience building automated PT or fuzzing pipelines is a plus.

Responsabilidades

• Reshape JFrog Product Security.
• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing and fuzzing.
• Lead Security innovation by building and managing penetration testing tools & AI Agents.
• Analyze vulnerabilities, perform root-cause analysis, and develop proofs of concept.
• Identify systemic product weaknesses and help define long-term mitigations.
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
• Contribute to security research publications and CVE submissions.
• Evolve internal testing capabilities with modern tooling and AI-assisted approaches.

Conocimientos

Penetration testing

Code security

Cloud-native systems

Kubernetes

Burp Suite

Herramientas

Burp Suite

Metasploit

Fuzzing frameworks

Descripción del empleo

Commit is seeking an experienced security researcher to join our offensive security team in Barcelona. You will work with researchers and ethical hackers to test web, API, cloud-native, and backend systems, focusing on offensive security, code exploitation, automation, and innovation.

You will plan campaigns, develop tools, and contribute to security research publications, reporting findings and helping scale secure-by-design principles across our products.