Senior Security Researcher

🔥 0 minutes ago

🇷🇸 Serbia – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 19%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Commit

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

Cybersecurity

Commit is a global tech services company founded in 2005, with a presence in Israel, the US, Canada, the UK, and Europe. It specializes in advanced technologies and applications, providing innovative, end-to-end technology solutions, including custom software and IoT platforms. Commit has over 700 multidisciplinary experts who cater to a wide array of companies, from startups to large enterprises, and focuses on areas like Cloud, GenAI, Software, IoT, Big Data, Cybersecurity, and data center migration. Its proprietary Flexible R&D methodology supports clients in transforming their technology visions into high-quality products while reducing costs and improving time-to-market.

📋 Description

• Analyze supply chain attacks • Dissect malware • Build open-source tools • Work with cross-functional teams to scan and protect users and organizations worldwide from emerging cyber threats • Help shape the future of the company's Active ASPM security platform

🎯 Requirements

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis) • Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces • Proven ability to ship software in a production environment • Strong understanding of the SDLC and modern CI/CD pipelines • Comfortable leveraging AI tools to optimize research and development processes • Proactive and independent mindset, with the ability to take full ownership of projects • Active contributions to open-source security tools or research projects (nice to have) • Hands-on experience with decompilers, debuggers, and network traffic analysis (nice to have) • Advanced malware analysis experience, including obfuscation, encryption, anti-analysis, and sandbox-evasion techniques (nice to have) • Web application penetration testing experience (nice to have) • Published CVEs, coordinated disclosures, writeups, blogs, or research papers (nice to have) • Experience public speaking at major industry conferences such as Black Hat, DEFCON, or RSAC (nice to have) • Genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats (nice to have)