Offensive Security Researcher — AI/Cloud & Apps (Remote)

Lever, Inc.; Netherlands; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote in Europe

Health benefits

Flexible work arrangements

Job summary

Lever, Inc. is partnering to hire a Staff Security Researcher based in the Netherlands. This hands-on role blends offensive security research with production-ready detections across web apps, APIs, cloud-native environments, and AI-powered systems.

You will develop detection rules using OpenGrep, extend analysis for new languages, and publish research while mentoring others. You’ll collaborate across engineering, product, AI/ML, and infrastructure to deploy scalable security capabilities.

Qualifications

• 8+ years of experience in offensive security or application security research.
• Broad programming knowledge with strong JavaScript skills and Python valued.
• Experience writing detection logic for security tooling and large-scale validation.

Responsibilities

• Create and maintain detection rules using OpenGrep to identify malware and vulnerabilities.
• Extend analysis capabilities to support more programming languages.
• Research vulnerabilities and exploit techniques, translating findings into production-ready detections.
• Develop proof-of-concept attacks and convert findings into deployable security capabilities.
• Design evaluation harnesses and benchmarks to measure coverage and false positives.
• Triage findings and validate detection results, contributing to new research standards and attack methodologies.
• Collaborate with engineering, product, AI/ML, and security teams to deploy research outputs.

Skills

JavaScript

Python

Web security

Offensive security

Vulnerability research

Communication

Education

Bachelor's or Master’s in CS

Tools

OpenGrep

Semgrep

Burp Suite

YARA

ffuf

Job description

Lever, Inc. is partnering to hire a Staff Security Researcher based in the Netherlands. This hands-on role blends offensive security research with production-ready detections across web apps, APIs, cloud-native environments, and AI-powered systems.

You will develop detection rules using OpenGrep, extend analysis for new languages, and publish research while mentoring others. You’ll collaborate across engineering, product, AI/ML, and infrastructure to deploy scalable security capabilities.