Application Security Research Engineer

Commit is seeking an Application Security Research Engineer in Barcelona. This role involves offensive security testing, automated exploit discovery, and advanced application security research to enhance product security and scale secure-by-design principles.

Commit is a global tech services company with over 1000 innovation experts serving a broad range of companies. They specialize in advanced technologies including Cloud, GenAI, Software, IoT, Big Data, and Cyber, offering end-to-end technology solutions and custom software development.

Join Commit to directly influence the security posture of company products. We are looking for a hands-on technical professional with a strong emphasis on offensive security, code exploitation, automation, and innovation. Apply now to be part of our dynamic team!

Company Overview

Commit is a global tech services company founded in 2005, with offices in Israel, US, Canada, UK, and Europe. They employ over 1000 multi-disciplinary innovation experts serving startups to large enterprises across various business sectors.

Specializing in advanced technologies like Cloud, GenAI, Software, IoT, Big Data, and Cyber, Commit provides innovative, end-to-end technology solutions. They develop custom software and IoT platforms, utilizing a Flexible R&D methodology to transform client visions into high-quality products, reducing costs and improving time-to-market.

Quick Details

• Salary Range: Not Specified
• Job Type: Full-time
• Experience: 5 Year+
• Qualifications: Bachelors Degree

Key Responsibilities

• Help to reshape company Product Security.
• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing and fuzzing.
• Lead Security innovation by building and managing penetration testing tools \ AI Agents.
• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept.
• Identify systemic product weaknesses and help define long-term mitigations.
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
• Contribute to security research publications, CVE submissions, and industry knowledge sharing.
• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.

Requirements

• 5+ years of experience in Research and penetration testing.
• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies.
• AI and LLM Penetration testing knowledge and Experience.
• Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and Custom Security Tools development.
• Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes).
• Familiarity with secure software architecture and typical attack vectors.
• Demonstrated ability to lead security testing engagements and report technical findings effectively.
• Experience building or integrating automated PT or fuzzing pipelines is a strong advantage.
• Knowledge and hands-on experience with SSDLC tools and CI/CD pipelines.
• Publications or open-source contributions in the security domain are a plus.

Benefits

• Work with a team of researchers and ethical hackers focused on offensive security.
• Directly influence the security posture of company products.
• Scale secure-by-design principles across the organization.
• Engage in a hands-on technical role with a strong emphasis on offensive security, code exploitation, automation, and innovation.
• Contribute to security research publications and CVE submissions.
• Continuously evolve testing capabilities using modern tooling and AI-assisted approaches.