Application Security Researcher
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Application Security Researcher researching vulnerabilities and autonomous penetration testing for OX Security’s AI-driven security platform. Building detection engines and shipping offensive-security capabilities to production.
Responsibilities:
- Research vulnerability chaining, business-logic flaws, and complex attack paths across applications and infrastructure
- Design and build detection engines and decision-making logic for autonomous security systems
- Evaluate AI models for application security use cases, measuring where they perform and where they fall short
- Prototype, build, and ship security capabilities into production environments
- Analyze large-scale security data to uncover exploitable attack paths and improve detection accuracy
- Partner with Product, Engineering, and Data teams to shape the next generation of security features
- Help set the team's research direction and own initiatives end to end, from idea to shipped capability
Requirements:
- M.Sc. in Computer Science, Cyber Security, or a related field
- 5+ years of hands-on experience in offensive security, vulnerability research, or application security
- Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains
- Strong coding skills in Python, Go, or a similar language, with experience shipping production-quality code
- Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives
- Solid grasp of modern application and infrastructure stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider
- Hands-on experience using LLMs or AI models for security tasks, and the judgment to measure where they help and where they fail
- Comfort working with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy
- Ability to take a research idea from prototype to production with minimal guidance
- Clear written communication: you can explain a complex attack path to engineers and product managers
Similar Jobs
Information Security Consultant – m/f/d
Information Security Consultant advising technology-driven Cloud, AI, and Data Center companies in Germany. Building audit-ready ISMS and compliance solutions with customers.
Senior Manager, Security Channel – Market Growth, Splunk
Leading partner go-to-market strategy for Cisco’s Splunk Security portfolio. Scaling launches, sales plays, and readiness programs across global security channel partners.
Senior Manager, Security Channel – Market Growth, Splunk
Security channel growth manager scaling Splunk cybersecurity partner go-to-market motions at Cisco. Driving market readiness, launches, enablement, and partner-led growth across U.S. remote locations.
Senior Director, Product, Security and Privacy
Product Counsel guiding product, privacy, security, and open-source legal strategy for Neo4j’s graph intelligence platform. Enabling compliant innovation across enterprise software, cloud, and AI products.
Cloud Security Administrator
Cloud Security Administrator securing Ballard Spahr’s national law-firm cloud infrastructure. Managing Azure security controls, access, monitoring, audits, and incident response.
SAP S/4HANA Defense & Security Functional Lead
SAP S/4HANA Defense & Security Functional Lead modernizing Department of War operations for CSCI Consulting. Leading transformation workshops, solution design, implementation, testing, and deployment.
Technical Lead – Chief Security Architect, Engineer
Technical Lead and Chief Security Architect securing Federal Government enterprise systems at PingWind. Leading architecture reviews, risk strategies, and modernization across cloud and emerging technologies.
Cloud Security Architect – Engineer
Cloud Security Architect/Engineer designing and assessing secure enterprise cloud solutions for PingWind’s Federal Government clients. Aligning modernization with FedRAMP, RMF, authorization, and architecture requirements.
Principal Consultant – AI Security
Principal AI Security Consultant leading enterprise AI security architecture and client engagements. Trace3 provides transformative IT solutions and consulting services to organizations across the United States.
Principal Cloud Security Engineer
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI-enabled platforms. Establishing cloud, Kubernetes, identity, and software-delivery security standards across USA and Canada.
Senior Infrastructure Security Engineer
Senior Infrastructure Security Engineer securing Headway’s mental healthcare platform and AWS infrastructure. Building guardrails, cloud security posture, and security operations for large-scale provider and patient systems.
Principal OT Cybersecurity – ICS Security Architect
Principal OT cybersecurity architect leading federal critical-infrastructure modernization for Peraton. Evaluating ICS and enterprise security solutions, vendors, and requirements.
Senior OT Cybersecurity, ICS Security Architect – Part-Time
Part-time OT/ICS cybersecurity architect supporting Peraton’s federal critical-infrastructure modernization program. Evaluating security products, defining requirements, and guiding procurement recommendations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing Azure and AWS cloud environments for ShorePoint, a cybersecurity services firm. Driving PQC readiness, automation, identity governance and continuous monitoring.
Staff Security Engineer – Incident Response
Staff Security Engineer protecting Databricks’ data and AI platform through incident response. Analyzing threats, conducting forensics, and building AI-enabled security automation.
Cybersecurity Practitioner – SOC, Incident Response, Detection, AppSec
Cybersecurity practitioners advising Mercor’s AI benchmark through paid remote expert interviews. Sharing enterprise defense workflows, evaluation criteria, and feedback on task taxonomy.
IT and Security Generalist
IT and security generalist operating identity, endpoint, automation, and security workflows. Supporting Galileo’s data-driven healthcare practice through monitoring, incident response, and secure systems.
Senior Product Security Engineer
Senior Product Security Engineer securing AlphaSense’s AI-native market intelligence platform. Leading AI/ML security, threat modeling, secure architecture, and customer-facing assurance.
Senior Product Security Engineer
Senior Product Security Engineer securing AlphaSense’s AI-native market intelligence platform. Leading AI/ML security, threat modeling, secure architecture, and customer assurance.
Senior Information Systems Security Officer
Senior ISSO leading RMF accreditation and cybersecurity compliance for AnaVation’s federal digital evidence platform. Preparing ATT/ATO packages and managing NIST controls, assessments, and continuous monitoring.