Security Researcher

Planck Technologies; Braga; Híbrido; EUR 42.000 - 55.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

2 days in office per week

Descripción de la vacante

Planck Technologies in Braga is seeking an experienced Application Security professional to advance security research, code reviews and secure development across multiple languages and frameworks.

You will perform secure code reviews, research security aspects of languages, design detection logic, and mentor junior researchers while collaborating with the team.

Formación

• Proven experience in Application Security, Security Research, or related areas.
• Strong knowledge of vulnerabilities, mitigations, secure coding practices, and security concepts.
• Experience researching security aspects of languages, frameworks and technologies.
• Experience with secure code review and vulnerability analysis across languages and frameworks.
• Familiarity with interpreted and compiled languages.
• Ability to learn new languages, technologies, and frameworks independently.
• Familiarity with software development methodologies.
• Strong analytical and problem-solving skills; ability to tackle complex security challenges.
• Excellent organizational, interpersonal, and communication skills; able to manage multiple priorities.
• Proficiency in English, both written and spoken.

Responsabilidades

• Research security aspects of multiple programming languages, frameworks, and technologies with depth and autonomy.
• Perform secure code reviews and analyze results from Application Security / AST solutions.
• Identify gaps, false positives/negatives, and improvement opportunities in automated security analysis.
• Analyze code containing vulnerabilities across languages and frameworks.
• Propose improvements to enhance AST solutions and capabilities.
• Contribute to SAST, SCA, DAST, and other Application Security solutions.
• Design, refine, and validate detection logic and security rules.
• Investigate complex security scenarios and translate findings into actionable improvements.
• Support developers and stakeholders with Application Security guidance.
• Share knowledge through documentation, peer reviews, and discussions.
• Mentor less-experienced researchers and contribute to team development.
• Collaborate with security and technology teams to drive innovation in AppSec.

Conocimientos

Application Security

Security Research

Web Application Penetration Testing

Secure Development

Secure Code Review

Security concepts

Programming languages (languages tech)

Learning new languages

Software development methodologies

Analytical thinking

Communication skills

English proficiency

Descripción del empleo

About Us

Planck Technologies is a company specialized in Software Development, dedicated to shaping futures and creating value through innovative IT solutions. By expanding teams and offering a comprehensive range of services from Software Development and Infrastructure Management to Cybersecurity we empower clients with all the expertise they need in one place. Inspired by the principles of quantum physics, we push beyond traditional boundaries to deliver customized solutions that redefine the IT landscape and drive shared success.

What are we looking for?

• Proven professional experience in Application Security, Security Research, Web Application Penetration Testing, Secure Development, Secure Code Review, or similar areas;
• Strong knowledge of Application Security, including vulnerabilities, mitigations, secure coding practices, and security concepts;
• Experience researching the security aspects of programming languages, frameworks, and technologies;
• Experience with secure code review and vulnerability analysis across different programming languages and frameworks;
• Familiarity with both interpreted and compiled programming languages;
• Ability to independently learn new programming languages, technologies, and frameworks;
• Familiarity with software development and associated methodologies;
• Strong analytical and problem-solving skills, with the ability to investigate complex security challenges;
• Excellent organizational, interpersonal, and communication skills;
• Ability to manage multiple requests and priorities in a fast-paced environment;
• Proficiency in English, both written and spoken.

Nice to Have

• Experience working with SAST, SCA, DAST, or other Application Security / AST solutions;
• Experience designing, refining, or validating security detection rules and logic;
• Experience analyzing and improving the results of automated security analysis tools;
• Experience across multiple programming languages, frameworks, and technology ecosystems;
• Experience supporting developers and technical stakeholders on Application Security topics;
• Experience mentoring junior security researchers or sharing knowledge within a technical team.

What will you do?

• Research the security aspects of multiple programming languages, frameworks, and technologies, working with depth and autonomy;
• Perform secure code reviews and analyze results produced by Application Security / AST solutions;
• Identify security gaps, false positives, false negatives, and opportunities for improvement in automated security analysis;
• Analyze code containing a wide range of vulnerabilities across different programming languages and frameworks;
• Propose improvements based on Application Security expertise to enhance AST solutions and their capabilities;
• Contribute to SAST, SCA, DAST, and other Application Security solutions;
• Design, refine, and validate detection logic and security rules that improve vulnerability detection capabilities;
• Investigate complex security scenarios and translate findings into actionable improvements;
• Support developers and relevant stakeholders with Application Security guidance and expertise;
• Share knowledge across the team through documentation, peer reviews, and technical discussions;
• Mentor less-experienced researchers and contribute to the continuous development of the team's technical expertise;
• Collaborate with other security and technology teams to drive innovation and continuously improve Application Security capabilities.

Location: Braga

Working Model: 2 days per week in the office

We're waiting for you!