Staff Security Researcher: From Exploits to Production Detections

Lever, Inc.; España; A distancia; EUR 110.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully remote Europe

Health benefits

Pension

Wellness days

Volunteer days

Birthday off

Career development

Flexible remote

Total rewards

Descripción de la vacante

Lever, Inc. is seeking a Staff Security Researcher in Spain to drive hands-on offensive security research and produce production-ready detections for web apps, APIs, cloud-native environments, and AI-powered systems.

You will translate discoveries into low-false-positive security checks, extend capabilities across languages, and contribute to research standards while collaborating with cross-functional teams. This remote role offers ownership in a fast-evolving security landscape.

Formación

• 8+ years in offensive security or application security research, or equivalent with a relevant degree.
• Broad programming knowledge with strong JavaScript required; Python valued.
• Experience writing detection logic for DAST scanners, fuzzers, or security tooling.
• Experience designing testing frameworks, evaluation harnesses, or large-scale validation systems.
• Strong web app pentesting across OWASP Top 10, REST, GraphQL, and modern API surfaces.

Responsabilidades

• Create and maintain detection rules, primarily using OpenGrep, to identify novel malware and vulnerabilities.
• Extend analysis capabilities to support more languages in the pipeline.
• Research vulnerabilities, exploitation techniques, cloud-native paths, and AI threats; translate into production detections.
• Develop attack-chain templates and evaluation harnesses to measure coverage and false positives.
• Collaborate with engineering, product, AI/ML, and infra teams to deploy research outputs.

Conocimientos

JavaScript

Python

Offensive security

Security research

Educación

Bachelor's or Master's degree in a relevant field

Herramientas

Burp Suite

sqlmap

nmap

ffuf

OpenGrep

Semgrep

YARA

Descripción del empleo

Lever, Inc. is seeking a Staff Security Researcher in Spain to drive hands-on offensive security research and produce production-ready detections for web apps, APIs, cloud-native environments, and AI-powered systems.

You will translate discoveries into low-false-positive security checks, extend capabilities across languages, and contribute to research standards while collaborating with cross-functional teams. This remote role offers ownership in a fast-evolving security landscape.