The English-language job board for Spain

SpainJobs.io

Senior Application Security Researcher

Remote from Spain·Full-time·Added 2 days ago (last checked 9 Nov)

CommIT

2 open roles

Apply

Our summary

Work mode
Remote from Spain
Contract
Full-time
English
Required
Experience
5+ years
Education
Master's degree

Visa options

  • The ad doesn’t mention sponsorship

    No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

Requirements

What we're looking for

  • 5+ years hands-on in offensive security, vulnerability research, or application security
  • Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains
  • Strong coding in Python, Go, or similar, with production-quality code shipped
  • **Experience building or tuning detection logic (**SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives
  • Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider
  • Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail
  • Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy
  • Takes research ideas from prototype to production with minimal guidance
  • Clear written communication — can explain a complex attack path to engineers and product managers
  • M.Sc. in Computer Science, Cyber Security, or a related field

Nice to have

  • Published research, CVEs, conference talks, or a bug bounty track record
  • Experience building AI agents or evaluation frameworks for LLMs
  • Background in exploit development, red teaming, or penetration testing
  • Code analysis techniques (taint analysis, call graphs, reachability)
  • Contributions to open-source security tools

The role

The company secures the AI-driven SDLC from prompt to production, unifying development and cloud context to stop vulnerabilities at the source. The Security Research group is hiring a senior, hands-on Application Security Researcher to push modern AppSec forward — working with engineers, researchers and AI/data scientists on next-generation detection, including autonomous, agentic pen-testing capabilities. This is a build-and-break role, not a typical AppSec position.

More jobs like this

or browse Security·Senior·Remote·Cybersecurity

WhatsApp

More jobs from CommIT

See all 2 jobs

Similar jobs