Application Security Researcher

🔥 0 minutes ago

🇨🇦 Canada – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 18%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OX Security

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

💰 Venture Round on 2023-08

Cybersecurity • SaaS • Enterprise

OX Security is a leading provider of Application Security Posture Management (ASPM) solutions, dedicated to enhancing software supply chain security. The company offers a comprehensive platform that integrates seamlessly into CI/CD pipelines to provide visibility, risk prioritization, and remediation of vulnerabilities throughout the software development lifecycle. By leveraging a centralized approach, OX Security helps organizations manage AppSec processes effectively, fostering collaboration and eliminating data silos. The platform empowers businesses to adopt the 'shift-left' security methodology, ensuring that security measures are built into the early stages of development to improve protection and accelerate release cycles. OX Security is recognized for its exceptional support and innovative tools that offer a holistic view of application security, making it a trusted partner for enterprises seeking to enhance their cybersecurity posture.

📋 Description

• Research vulnerability chaining, business-logic flaws, and complex attack paths across applications and infrastructure • Design and build detection engines and decision-making logic for autonomous security systems • Evaluate AI models for application security use cases, measuring where they perform and where they fall short • Prototype, build, and ship security capabilities into production environments • Analyze large-scale security data to uncover exploitable attack paths and improve detection accuracy • Partner with Product, Engineering, and Data teams to shape the next generation of security features • Help set the team's research direction and own initiatives end to end, from idea to shipped capability

🎯 Requirements

• M.Sc. in Computer Science, Cyber Security, or a related field • 5+ years of hands-on experience in offensive security, vulnerability research, or application security • Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains • Strong coding skills in Python, Go, or a similar language, with experience shipping production-quality code • Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives • Solid grasp of modern application and infrastructure stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider • Hands-on experience using LLMs or AI models for security tasks, and the judgment to measure where they help and where they fail • Comfort working with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy • Ability to take a research idea from prototype to production with minimal guidance • Clear written communication: you can explain a complex attack path to engineers and product managers

🏖️ Benefits

• Comprehensive Health Coverage: Medical, Dental, and Vision plans to keep you and your family healthy. • Unlimited Paid Time Off (PTO) • Gifts on your birthday & anniversary, & Holidays.