Senior Application Security Research Engineer

Commit; Barcelona; On-site; EUR 90,000 - 130,000; Full time

Job summary

Commit in Barcelona is seeking an Applications Security Research Engineer to join a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research. You will shape security posture across products and drive secure-by-design principles.

This hands-on role emphasizes offensive security, code exploitation, automation, and innovation, with collaboration across engineering teams to triage and fix vulnerabilities

Qualifications

• 5+ year experience in Research and penetration testing.
• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies.
• AI and LLM Penetration testing knowldge and Experience
• Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and Custom Security Tools development.
• Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes).
• Familiarity with secure software architecture and typical attack vectors.
• Demonstrated ability to lead security testing engagements and report technical findings effectively.
• Experience building or integrating automated PT or fuzzing pipelines is a strong advantage.
• Knowledge and hands-on experience with SSDLC tools and CI/CD pipelines,
• Publications or open-source contributions in the security domain are a plus.

Responsibilities

• Help to reshape company Product Security
• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing and fuzzing.
• Lead Security innovation by building and managing penetration testing tools \ AI Agents
• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept.
• Identify systemic product weaknesses and help define long-term mitigations.
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
• Contribute to security research publications, CVE submissions, and industry knowledge sharing.
• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.

Skills

Penetration testing

Offensive security

Coding skills

AI/LLM testing

Cloud-native

Kubernetes

Lead security engagements

Tools

Burp Suite

Metasploit

Custom Security Tools

Job description

Commit in Barcelona is seeking an Applications Security Research Engineer to join a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research. You will shape security posture across products and drive secure-by-design principles.

This hands-on role emphasizes offensive security, code exploitation, automation, and innovation, with collaboration across engineering teams to triage and fix vulnerabilities