Senior Application Security Researcher

Commit

. Conduct hands-on application security research .

Posted 11/11/2026full-timeRemote • KazakhstanSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in offensive security and application security, with strong coding skills in Python or Go. Capable of developing and tuning detection logic while effectively communicating complex security concepts to technical teams.

Highest-signal resume keywords

Offensive Security ExperienceWeb Application VulnerabilitiesDetection Logic DevelopmentCI/CD Pipeline ProficiencyHands-On AI Model Use

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonGoApplication SecurityVulnerability ResearchDetection Logic (SAST, DAST, SCA)SQLBigQueryExploit DevelopmentCode Analysis TechniquesPenetration Testing

Soft Skills

Clear Written CommunicationJudgment in Security Tasks

Tools & Technologies

CI/CD PipelinesContainersKubernetesCloud ProvidersLLMsAI Models

Certifications & Qualifications

M.Sc. in Computer ScienceM.Sc. in Cyber Security

Industry Keywords

Application Security ResearchBusiness-Logic FlawsMulti-Step Attack ChainsFalse Positives ReductionOpen-Source Security ToolsBug Bounty Track Record

Tech Stack

Tools & technologies

BigQueryCloudCyber SecurityKubernetesPythonSQLGo

About the role

Key responsibilities & impact

Conduct hands-on application security research
Push modern application security forward
Work with engineers, researchers, and AI/data scientists on next-generation detection
Develop autonomous, agentic penetration-testing capabilities
Build and break security solutions
Take research ideas from prototype through production
Measure detection accuracy and reduce false positives
Explain complex attack paths to engineers and product managers

Requirements

What you’ll need

5+ years hands-on in offensive security, vulnerability research, or application security
Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains
Strong coding skills in Python, Go, or similar, with production-quality code shipped
Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives
Solid grasp of CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider
Hands-on use of LLMs / AI models for security tasks, with judgment to measure where they help and fail
Comfort with large datasets and SQL, BigQuery, or similar
Ability to take research ideas from prototype to production with minimal guidance
Clear written communication to explain complex attack paths to engineers and product managers
M.Sc. in Computer Science, Cyber Security, or a related field
Preferred: published research, CVEs, conference talks, or bug bounty track record
Preferred: experience building AI agents or evaluation frameworks for LLMs
Preferred: background in exploit development, red teaming, or penetration testing
Preferred: code analysis techniques such as taint analysis, call graphs, or reachability
Preferred: contributions to open-source security tools

Benefits

Comp & perks

Remote work
Full-time employment