Lead Offensive Security Researcher – App Security (Barcelona)

Commit; Warszawa; On-site; PLN 517,000 - 775,000; Full time

Job summary

Commit seeks an Application Security Research Engineer to relocate to Barcelona. You will lead a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research.

This hands-on role shapes the security posture of products and advances secure-by-design principles. You will plan and execute advanced penetration testing campaigns, build scalable tools, and drive security innovation.

Qualifications

• 2+ years leading application security research teams.
• 7+ years in research and penetration testing.
• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies.
• AI and LLM penetration testing knowledge and experience.
• Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and custom security tools development.
• Familiarity with modern architectures (cloud, microservices, containers, Kubernetes).
• Familiarity with secure software architecture and typical attack vectors.
• Demonstrated ability to lead security testing engagements and report findings.

Responsibilities

• Build and lead a team of security researchers and penetration testers.
• Help to reshape company Product Security.
• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing and fuzzing.
• Lead security innovation by building and managing penetration testing tools and AI agents.
• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept.
• Identify systemic product weaknesses and define long-term mitigations.
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
• Contribute to security research publications, CVE submissions, and knowledge sharing.
• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.

Skills

Team leadership

Penetration testing

Web/API/Cloud

AI/LLM security

Security tools

Kubernetes

CI/CD security

Publications

Tools

Burp Suite

Metasploit

Custom tools

CI/CD tooling

Job description

Commit seeks an Application Security Research Engineer to relocate to Barcelona. You will lead a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research.

This hands-on role shapes the security posture of products and advances secure-by-design principles. You will plan and execute advanced penetration testing campaigns, build scalable tools, and drive security innovation.