Application Security Research Engineer

Barcelona, Catalonia, Spain
Posted Nov 5, 2026

INDUSTRYSoftware & InternetCybersecurity

Apply with RefersoAI Apply on careers page

Responsibilities

Help to reshape company Product Security
Plan and execute advanced penetration testing campaigns
Develop tools and frameworks for scalable security testing and fuzzing
Lead Security innovation by building and managing penetration testing tools AI Agents
Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept
Identify systemic product weaknesses and help define long-term mitigations
Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities
Contribute to security research publications, CVE submissions, and industry knowledge sharing
Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches

Skills

codingwebAPIcloud-nativebackendAILLMpenetration testing toolsBurp SuiteMetasploitcustom security toolsmodern architecturescloudmicroservicescontainersKubernetessecure software architectureSSDLC toolsCI/CD pipelinesBurp SuiteMetasploitKubernetescontainersmicroservices CI/CD pipelines

Full description

Description We are looking for Application Security Research Engineer in Barcelona. In this role, you will work with a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research. Your work will directly influence the security posture of company products and help scale secure-by-design principles. This is a hands-on technical role with a strong emphasis on offensive security, code exploitation, automation, and innovation. Responsibilities: Help to reshape company Product Security Plan and execute advanced penetration testing campaigns. Develop tools and frameworks for scalable security testing and fuzzing. Lead Security innovation by building and managing penetration testing tools \ AI Agents Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept. Identify systemic product weaknesses and help define long-term mitigations. Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities. Contribute to security research publications, CVE submissions, and industry knowledge sharing. Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches. Requirements Requirements: 5+ year experience in Research and penetration testing. Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies. AI and LLM Penetration testing knowldge and Experience Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and Custom Security Tools development. Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes). Familiarity with secure software architecture and typical attack vectors. Demonstrated ability to lead security testing engagements and report technical findings effectively. Experience building or integrating automated PT or fuzzing pipelines is a strong advantage. Knowledge and hands-on experience with SSDLC tools and CI/CD pipelines, Publications or open-source contributions in the security domain are a plus.