{"id":2501718,"url":"https://alion.io/job/ox-security-application-security-researcher","title":"Application Security Researcher","company":{"id":177898,"name":"OX Security","domain":"ox.security","url":"https://alion.io/company/ox-security","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":68000,"max_usd":124000,"period":"year","method":"role_seniority_country_cell","sample_n":46},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"BigQuery","optional":false},{"name":"CI/CD","optional":false},{"name":"Google BigQuery","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-10-14T04:23:59Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-16T00:20:37Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nAbout the Position\nOX Security secures the AI-driven SDLC from prompt to production. We eliminate critical, real-time risks from AI code generation through cloud runtime by doing what conventional tools can’t: unifying development and cloud context to stop vulnerabilities right at the source. At OX, we’re building the future of cyber security for the AI era. If you’re looking to work on disruptive technology with an amazing team, you belong here.\nWe’re looking for a highly skilled Application Security Researcher to join our Security Research group and help us push the boundaries of modern AppSec. This is a critical, hands-on role where you’ll work closely with engineers, researchers, and AI & data scientists to build the next generation of application security - including autonomous, agentic pen testing capabilities.\nThis is not a typical AppSec role. You’ll be building, breaking, and redefining how offensive security works at scale.\nResponsibilities\nWhat You’ll Be Doing\nResearch vulnerability chaining, business-logic flaws, and complex attack paths across applications and infrastructure\nDesign and build detection engines and decision-making logic for autonomous security systems\nEvaluate AI models for application security use cases, measuring where they perform and where they fall short\nPrototype, build, and ship security capabilities into production environments\nAnalyze large-scale security data to uncover exploitable attack paths and improve detection accuracy\nPartner with Product, Engineering, and Data teams to shape the next generation of security features\nHelp set the team's research direction and own initiatives end to end, from idea to shipped capability\nRequirements\nWhat You'll Bring\nM.Sc. in Computer Science, Cyber Security, or a related field\n5+ years of hands-on experience in offensive security, vulnerability research, or application security\nDeep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains\nStrong coding skills in Python, Go, or a similar language, with experience shipping production-quality code\nExperience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives\nSolid grasp of modern application and infrastructure stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider\nHands-on experience using LLMs or AI models for security tasks, and the judgment to measure where they help and where they fail\nComfort working with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy\nAbility to take a research idea from prototype to production with minimal guidance\nClear written communication: you can explain a complex attack path to engineers and product managers\nNice to Have\n Published research, CVEs, conference talks, or bug bounty track record\nExperience building AI agents or evaluation frameworks for LLMs\nBackground in exploit development, red teaming, or penetration testing\nExperience with code analysis techniques (taint analysis, call graphs, reachability)\nContributions to open-source security tools\nBenefits Package (via Vensure)\nWe partner with Vensure to provide top-tier benefits for our Canada-based team members:\nComprehensive Health Coverage: Medical, Dental, and Vision plans to keep you and your family healthy.\n Unlimited Paid Time Off (PTO): We offer unlimited vacation because we trust you to take time when you need it and to manage your time effectively. We value work-life balance and want you to recharge.\n Gifts on your birthday & anniversary, & Holidays.","description_format":"text","description_chars":3641,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-14T06:11:35Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":35,"reasons":["conf:0","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ox-security-application-security-researcher","json_url":"https://alion.io/job/ox-security-application-security-researcher.json","meta":{"generated_at":"2026-10-16T01:08:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1775,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":177898},"rest":"https://alion.io/mcp/rest/get_company?id=177898"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fox-security-application-security-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fox-security-application-security-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fox-security-application-security-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ox-security-application-security-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fox-security-application-security-researcher"}]}