Remote Offensive Security Researcher (App/AI)

Lever, Inc.; France; À distance; EUR 90 000 - 140 000; Plein temps

Avantages offerts par ce poste

Fully remote Europe

Health & pension

Wellness days

Volunteer days

Résumé du poste

Lever, Inc. is seeking a Staff Security Researcher in France to lead hands-on offensive security research across web apps, APIs, cloud-native environments, and AI-powered systems. You will transform research into production-ready detections, build PoCs, and contribute to security tooling.

Collaboration with engineering, product, AI/ML, and infrastructure teams is essential. The role emphasizes ownership, low false-positive detections, and evolving security research standards while publishing

Qualifications

• 8+ years in offensive security or application security research
• Broad programming knowledge with strong JavaScript and Python
• Experience writing detection logic for security tooling
• Web API security and OWASP Top 10
• Experience with cloud-native security and CI/CD security

Responsabilités

• Create and maintain detection rules for malware and vulnerabilities
• Extend analysis capabilities to new languages
• Research vulnerabilities, exploitation techniques, and AI threats
• Develop PoCs and deployable security detections
• Design evaluation harnesses and benchmarks
• Triage complex findings and validate results
• Publish technical research and contribute to security community
• Mentor junior researchers and collaborate across teams

Connaissances

JavaScript

Python

Offensive security

Web app pentesting

Burp Suite

sqlmap

nmap

ffuf

OpenGrep

Semgrep

Threat research

Formation

Bachelor's or Master's in CS/Security

Outils

OpenGrep

Semgrep

Burp Suite

YARA

CVEs/Advisories

Description du poste

Lever, Inc. is seeking a Staff Security Researcher in France to lead hands-on offensive security research across web apps, APIs, cloud-native environments, and AI-powered systems. You will transform research into production-ready detections, build PoCs, and contribute to security tooling.

Collaboration with engineering, product, AI/ML, and infrastructure teams is essential. The role emphasizes ownership, low false-positive detections, and evolving security research standards while publishing