Commit
501 - 1000 employees
🔒 Cybersecurity
Cybersecurity
Commit is a global tech services company founded in 2005, with a presence in Israel, the US, Canada, the UK, and Europe. It specializes in advanced technologies and applications, providing innovative, end-to-end technology solutions, including custom software and IoT platforms. Commit has over 700 multidisciplinary experts who cater to a wide array of companies, from startups to large enterprises, and focuses on areas like Cloud, GenAI, Software, IoT, Big Data, Cybersecurity, and data center migration. Its proprietary Flexible R&D methodology supports clients in transforming their technology visions into high-quality products while reducing costs and improving time-to-market.
Senior Application Security Researcher
🔥 11 minutes ago
Where this job comes from
Posted on Commit's careers page, not through a job board
First seen by Remote Rocketship 11 minutes ago
Commit
501 - 1000 employees
🔒 Cybersecurity
Cybersecurity
Commit is a global tech services company founded in 2005, with a presence in Israel, the US, Canada, the UK, and Europe. It specializes in advanced technologies and applications, providing innovative, end-to-end technology solutions, including custom software and IoT platforms. Commit has over 700 multidisciplinary experts who cater to a wide array of companies, from startups to large enterprises, and focuses on areas like Cloud, GenAI, Software, IoT, Big Data, Cybersecurity, and data center migration. Its proprietary Flexible R&D methodology supports clients in transforming their technology visions into high-quality products while reducing costs and improving time-to-market.
📋 Description
• Conduct hands-on application security research • Push modern application security forward • Work with engineers, researchers, and AI/data scientists on next-generation detection • Develop autonomous, agentic penetration-testing capabilities • Build and break security solutions • Take research ideas from prototype through production • Measure detection accuracy and reduce false positives • Explain complex attack paths to engineers and product managers
🎯 Requirements
• 5+ years hands-on in offensive security, vulnerability research, or application security • Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains • Strong coding skills in Python, Go, or similar, with production-quality code shipped • Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives • Solid grasp of CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider • Hands-on use of LLMs / AI models for security tasks, with judgment to measure where they help and fail • Comfort with large datasets and SQL, BigQuery, or similar • Ability to take research ideas from prototype to production with minimal guidance • Clear written communication to explain complex attack paths to engineers and product managers • M.Sc. in Computer Science, Cyber Security, or a related field • Preferred: published research, CVEs, conference talks, or bug bounty track record • Preferred: experience building AI agents or evaluation frameworks for LLMs • Preferred: background in exploit development, red teaming, or penetration testing • Preferred: code analysis techniques such as taint analysis, call graphs, or reachability • Preferred: contributions to open-source security tools
🏖️ Benefits
• Remote work • Full-time employment
Apply Now📊 Check your resume score for this job
Improve your chances of getting an interview by checking your resume score before you apply.
Similar Jobs
🕒 September 29
Corporate Security Engineer securing Mirantis’ Kubernetes-native AI infrastructure through endpoint, identity, detection, and incident response operations. Supporting compliance and distributed US-hours security coverage.
