{"id":2497587,"url":"https://alion.io/job/all-rights-reserved-application-security-research-engineer","title":"Application Security Research Engineer","company":{"id":2313062,"name":"Comm-IT","domain":"comm-it.com","url":"https://alion.io/company/comm-it-com","size_band":"11-50","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Barcelona, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":121000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Metasploit","optional":false}],"status":"live","first_seen_at":"2026-08-18T12:18:48Z","employer_posted_date":"2026-08-18","last_verified_at":"2026-10-15T08:48:34Z","board_verified":true,"closed_at":null,"days_open":57,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":57},"description":"Description\nWe are looking for an Application Security Research Engineer in Barcelona. In this role, you will work with a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research. Your work will directly influence the security posture of company products and help scale secure-by-design principles. This is a hands-on technical role with a strong emphasis on offensive security, code exploitation, automation, and innovation.\nResponsibilities:\nHelp to reshape the company's Product Security\nPlan and execute advanced penetration testing campaigns.\nDevelop tools and frameworks for scalable security testing and fuzzing.\nLead Security innovation by building and managing penetration testing tools AI Agents\nAnalyze vulnerabilities, perform root cause analysis, and develop proofs of concept.\nIdentify systemic product weaknesses and help define long-term mitigations.\nCollaborate with engineering teams to reproduce, triage, and fix vulnerabilities.\nContribute to security research publications, CVE submissions, and industry knowledge sharing.\nContinuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.\nRequirements\nRequirements:\n5+ year experience in Research and penetration testing.\nStrong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies.\nAI and LLM Penetration testing knowldge and Experience\nExperience with penetration testing tools (Burp Suite, Metasploit, etc.) and Custom Security Tools development.\nFamiliarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes).\nFamiliarity with secure software architecture and typical attack vectors.\nDemonstrated ability to lead security testing engagements and report technical findings effectively.\nExperience building or integrating automated PT or fuzzing pipelines is a strong advantage.\nKnowledge and hands-on experience with SSDLC tools and CI/CD pipelines,\nPublications or open-source contributions in the security domain are a plus.","description_format":"text","description_chars":2101,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-14T05:12:04Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.293,"p_room":0.36,"age_days":57,"expected_fill_days":31,"reasons":["conf:1","agency","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/all-rights-reserved-application-security-research-engineer","json_url":"https://alion.io/job/all-rights-reserved-application-security-research-engineer.json","meta":{"generated_at":"2026-10-15T10:21:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15701,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2313062},"rest":"https://alion.io/mcp/rest/get_company?id=2313062"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fall-rights-reserved-application-security-research-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fall-rights-reserved-application-security-research-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fall-rights-reserved-application-security-research-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/all-rights-reserved-application-security-research-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fall-rights-reserved-application-security-research-engineer"}]}