Real job — pulled straight from CommIT’s careers page · Verified October 5, 2026 · No reposts.
Job description
CommIT is hiring a Senior Application Security Researcher — a full-time, based in Canada role. Apply directly on CommIT's careers page below.
Senior Application Security Researcher
Location: Canada (CA)
Experience Level: senior
Description
The company secures the AI-driven SDLC from prompt to production, unifying development and cloud context to stop vulnerabilities at the source. The Security Research group is hiring a senior, hands-on Application Security Researcher to push modern AppSec forward — working with engineers, researchers and AI/data scientists on next-generation detection, including autonomous, agentic pen-testing capabilities. This is a build-and-break role, not a typical AppSec position.
Requirements
Must-have skills:
- 5+ years hands-on in offensive security, vulnerability research, or application security
- Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains
- Strong coding in Python, Go, or similar, with production-quality code shipped
- Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives
- Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider
- Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail
- Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy
- Takes research ideas from prototype to production with minimal guidance
- Clear written communication — can explain a complex attack path to engineers and product managers
- M.Sc. in Computer Science, Cyber Security, or a related field
Nice to have:
- Published research, CVEs, conference talks, or a bug bounty track record
- Experience building AI agents or evaluation frameworks for LLMs
- Background in exploit development, red teaming, or penetration testing
- Code analysis techniques (taint analysis, call graphs, reachability)
- Contributions to open-source security tools
Get Senior Application Security Researcher jobs like this→
New roles from thousands of companies land hourly, straight from their careers pages. Get the freshest matches by email so you never miss one.
Email me new jobsSimilar jobs
Frequently asked questions
What skills are required for Senior Application Security Researcher at CommIT?
The required skills for Senior Application Security Researcher at CommIT include: Python, Go, Kubernetes, SQL, BigQuery, API, LLM, AI.
What is the seniority level for Senior Application Security Researcher at CommIT?
Senior Application Security Researcher at CommIT is a Senior level position.
How do I apply for Senior Application Security Researcher at CommIT?
You can view the full description and apply for Senior Application Security Researcher at CommIT on EchoJobs: https://echojobs.io/job/commit-senior-application-security-researcher-9wkm3.