Application Security Researcher

OX Security

. Research vulnerability chaining, business-logic flaws, and complex attack paths across applications and infrastructure .

Posted 9/24/2026full-timeRemote • CanadaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in offensive security and vulnerability research, with strong coding skills in Python or Go. Proficient in building detection logic and analyzing large-scale security data to enhance application security.

Highest-signal resume keywords

Offensive Security ExperienceVulnerability ResearchDetection Logic DevelopmentApplication Security ExpertiseCloud Infrastructure Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonGoSASTDASTSCASQLBigQueryCI/CD PipelinesKubernetesAI Model Evaluation

Soft Skills

Clear Written CommunicationResearch Direction Setting

Tools & Technologies

Detection EnginesAutonomous Security SystemsProduction EnvironmentsLarge Datasets

Certifications & Qualifications

M.Sc. in Computer ScienceM.Sc. in Cyber Security

Industry Keywords

Web Application VulnerabilitiesAPI VulnerabilitiesBusiness-Logic FlawsMulti-Step Attack ChainsFalse Positives Reduction

Tech Stack

Tools & technologies

BigQueryCloudCyber SecurityKubernetesPythonSQLGo

About the role

Key responsibilities & impact

Research vulnerability chaining, business-logic flaws, and complex attack paths across applications and infrastructure
Design and build detection engines and decision-making logic for autonomous security systems
Evaluate AI models for application security use cases, measuring where they perform and where they fall short
Prototype, build, and ship security capabilities into production environments
Analyze large-scale security data to uncover exploitable attack paths and improve detection accuracy
Partner with Product, Engineering, and Data teams to shape the next generation of security features
Help set the team's research direction and own initiatives end to end, from idea to shipped capability

Requirements

What you’ll need

M.Sc. in Computer Science, Cyber Security, or a related field
5+ years of hands-on experience in offensive security, vulnerability research, or application security
Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains
Strong coding skills in Python, Go, or a similar language, with experience shipping production-quality code
Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives
Solid grasp of modern application and infrastructure stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider
Hands-on experience using LLMs or AI models for security tasks, and the judgment to measure where they help and where they fail
Comfort working with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy
Ability to take a research idea from prototype to production with minimal guidance
Clear written communication: you can explain a complex attack path to engineers and product managers

Benefits

Comp & perks

Comprehensive Health Coverage: Medical, Dental, and Vision plans to keep you and your family healthy.
Unlimited Paid Time Off (PTO)
Gifts on your birthday & anniversary, & Holidays.