Senior Offensive Security Research Engineer

Commit; Barcelona; Presencial; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Commit in Barcelona is seeking an Application Security Research Engineer to join a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research.

This hands-on role emphasizes offensive security, code exploitation, automation, and innovation, with the goal of improving product security posture and scaling secure-by-design principles across the company's offerings.

Formación

• 5+ years of research and penetration testing experience.
• Strong coding skills and deep understanding of web, API, cloud-native, and backend tech.
• AI/LLM-based penetration testing experience.
• Proficient with Burp Suite, Metasploit, and custom security tool development.
• Familiar with cloud, microservices, containers and Kubernetes.
• Ability to lead testing engagements and report findings clearly.

Responsabilidades

• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing and fuzzing.
• Lead security innovation by building and managing penetration testing tools & AI Agents.
• Analyze vulnerabilities, perform root cause analysis, and develop PoCs.
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
• Contribute to security publications, CVE submissions, and industry knowledge sharing.
• Evolve internal testing capabilities using modern tooling and AI-assisted approaches.

Conocimientos

Penetration testing

Web API security

Cloud-native tech

Secure software development

Security testing leadership

Herramientas

Burp Suite

Metasploit

Kubernetes

CI/CD pipelines

Descripción del empleo

Commit in Barcelona is seeking an Application Security Research Engineer to join a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research.

This hands-on role emphasizes offensive security, code exploitation, automation, and innovation, with the goal of improving product security posture and scaling secure-by-design principles across the company's offerings.