Lead AppSec Researcher: Build & Break AI-Driven Security

CommIT; Warszawa; Sur place; PLN 260 000 - 420 000; Plein temps

Résumé du poste

CommIT in Warsaw, Poland, is hiring a senior Application Security Researcher to push modern AppSec forward. This build-and-break role involves working with engineers, researchers, and AI/data scientists on next-generation detection, including autonomous pen-testing capabilities.

You will contribute across the AI-driven SDLC, unifying development and cloud context to stop vulnerabilities at the source. You must have 5+ years in offensive security or vulnerability research, deep web/API security

Qualifications

• 5+ years hands-on in offensive security, vulnerability research, or application security.
• Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains.
• Strong coding in Python, Go, or similar, with production-quality code
• Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives.
• Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider.
• Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail.
• Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy.
• Takes research ideas from prototype to production with minimal guidance.
• Clear written communication - can explain a complex attack path to engineers and product managers.
• M.Sc. in Computer Science, Cyber Security, or a related field

Connaissances

Offensive security

Vulnerability research

Web application security

API security

Python

Go

LLMs / AI for security

Data analysis

Formation

M.Sc. in Computer Science, Cyber Security, or related field

Outils

CI/CD pipelines

Kubernetes

Cloud providers (AWS/Azure/GCP)

SAST/DAST tooling

Code analysis techniques

Description du poste

CommIT in Warsaw, Poland, is hiring a senior Application Security Researcher to push modern AppSec forward. This build-and-break role involves working with engineers, researchers, and AI/data scientists on next-generation detection, including autonomous pen-testing capabilities.

You will contribute across the AI-driven SDLC, unifying development and cloud context to stop vulnerabilities at the source. You must have 5+ years in offensive security or vulnerability research, deep web/API security