Application Security Engineer (relocation to Barcelona)

CommIT; Poland; On-site; PLN 80,000 - 100,000; Full time

Job summary

CommIT in Poland is seeking a skilled penetration tester to reshape JFrog product security and execute advanced testing campaigns. The ideal candidate will have over 4 years of experience and strong coding skills across web, API, and cloud technologies.

This role involves developing security testing frameworks, leading security innovations, and collaborating with engineering teams. If you're ready for a mission-critical role where you can impact software security, apply now.

Qualifications

• 4+ years of experience in research and penetration testing.
• Strong coding skills with deep technical understanding of technologies.
• Demonstrated ability for effective reporting of technical findings.

Responsibilities

• Help to reshape JFrog Product Security.
• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing.
• Lead Security innovation through penetration testing tools.
• Analyze vulnerabilities and develop proofs of concept.
• Collaborate with engineering teams to fix vulnerabilities.

Skills

Web technologies

API technologies

Cloud-native technologies

Backend technologies

Penetration Testing tools

AI and LLM Penetration testing

Secure software architecture

Tools

Burp Suite

Metasploit

SSDLC tools

CI/CD pipelines

Job description

Description

We're running the software that runs the world - and we want you along for the ride. The company is a special place with a unique combination of brilliance, spirit, and great people. Here, if you're willing to do more, your career can take off. And since software plays a central role in everyone's lives, you'll be part of a critical mission.

Responsibilities

• Help to reshape JFrog Product Security
• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing and fuzzing.
• Lead Security innovation by building and managing penetration testing tools \ AI Agents
• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept.
• Identify systemic product weaknesses and help define long-term mitigations.
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
• Contribute to security research publications, CVE submissions, and industry knowledge sharing.
• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.

Requirements

• 4+ year experience in Research and penetration testing.
• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies.
• AI and LLM Penetration testing knowldge and Experience.
• Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and Custom Security Tools development.
• Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes).
• Familiarity with secure software architecture and typical attack vectors.
• Demonstrated ability to do security testing engagements and report technical findings effectively.
• Experience building or integrating automated PT or fuzzing pipelines is a strong advantage.
• Knowledge and hands-on experience with SSDLC tools and CI/CD pipelines.