Lead App Security Researcher & Offensive Tech Lead

CommIT; España; On-site; PHP 4,884,004 - 7,326,007; Full time

Job summary

CommIT in Philippines is seeking an experienced Application Security Research Engineer to lead a team focused on advanced security research and penetration testing. The role emphasizes offensive security, automation, and innovation, shaping product security and collaborating with engineering teams. Candidates should have over 7 years of experience in research and penetration testing, strong coding skills, and familiarity with modern architectures and security tools. This is a hands-on role with opportunities for building security testing tools.

Qualifications

• 2+ years of experience in leading application security research teams.
• 7+ years experience in research and penetration testing.
• Strong coding skills with deep technical understanding of various technologies.
• Experience with developing custom security tools.
• Knowledge of SSDLC tools and CI/CD pipelines.

Responsibilities

• Build and lead a team of security researchers and penetration testers.
• Plan and execute advanced penetration testing campaigns.
• Analyze vulnerabilities and perform root cause analysis.
• Collaborate with engineering teams to fix vulnerabilities.
• Contribute to security research publications and industry sharing.

Skills

Application security research team leadership

Penetration testing

Strong coding skills

Knowledge of AI and LLM penetration testing

Experience with Burp Suite and Metasploit

Familiarity with microservices and Kubernetes

Ability to lead security testing engagements

Tools

Burp Suite

Metasploit

Security testing tools

Job description

CommIT in Philippines is seeking an experienced Application Security Research Engineer to lead a team focused on advanced security research and penetration testing. The role emphasizes offensive security, automation, and innovation, shaping product security and collaborating with engineering teams. Candidates should have over 7 years of experience in research and penetration testing, strong coding skills, and familiarity with modern architectures and security tools. This is a hands-on role with opportunities for building security testing tools.