First seen by our source: 26 days ago
Senior Application Security Researcher
@ CommIT
Toronto, Ontario
Overview
CommIT is hiring a senior Application Security Researcher to build and break detection for its AI-driven software development lifecycle. The role covers web, API and business-logic vulnerability research, agentic pen-testing, and detection tuning with LLMs, with production code expected. Full-time.
Responsibilities:
- Research and build vulnerability detection for web apps and APIs
- Develop agentic and autonomous pen-testing capabilities
- Tune SAST, DAST, SCA and secrets detection to reduce false positives
- Measure LLM and detection accuracy on large datasets
- Take research prototypes to production with minimal guidance
Requirements summary:
- 5+ years in offensive security, vulnerability research or AppSec
- Production-quality Python or Go
- Experience with CI/CD, containers, Kubernetes and a major cloud provider
- Hands-on use of LLMs for security tasks
- M.Sc. in Computer Science, Cyber Security or related field
Tools & skills
Source and dates
Employer career site / ATS feed · comeet
- Employer posting date
- Not provided
- First seen by our source
- 2026-10-11
- Source record updated
- 2026-11-03
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Experience | 5+ years |
| Hours per week | 40 (estimated) |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Education | Master’s degree (required) |
| Fields of study | Computer Science, Cyber Security |
Summary and details written by AI from the posting; the employer’s posting is the authority.
CommIT
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
A global tech services powerhouse in Israel, the US, and Europe delivering cutting-edge development projects
Full company description
Commit is a global tech services company with offices in Israel, US, Canada, UK, and Europe. The company was founded in 2005 and has over 1000 multi-disciplinary innovation experts who serve a broad range of companies, from small startups to large enterprises in multiple business sectors. Commit specializes in advanced technologies and applications with dedicated practices in Cloud, GenAI, Software, IoT, Big Data, Cyber, Collaboration, Data center migration projects, and more. Commit offers innovative, end-to-end technology solutions by developing custom software and IoT platforms for clients looking to build their next-gen products within the modern ICT world. Commit’s complete and comprehensive engineering powerhouse of resources and proprietary Flexible R&D methodology helps transform its clients’ technology visions into high-quality products while reducing costs and improving time-to-market.
- LinkedIn followers
- 24,107
- People associated on LinkedIn
- 535
- Reported office locations
- 3 Tozeret Haaretz St., Building I, Petah Tikva, 49348, IL
- 477 Madison Avenue 6th Floor, New York, New York 10022, US
- Business categories
- Information Technology
- Cyber Security
- Software
- Internet of Things
- Other recorded names
- CommIT
- Commit
- Specialties
- System Design
- Software Development
- Communication and Networks
- Computing
- Infrastructure
- Consolidation & Virtualization
- Monitoring
- Control and BSM
- Data Security
- Data Connectivity and Integration
- QA & Testing
- Test Automation
- Cloud
- SaaS
- IoT
- and UI/UX
- Profile identifies a recruitment agency
- No
- Reported total investment
- 0
Currency and observation date were not supplied; this is not a current valuation or a funding round.
Commit is a global tech services company with offices in Israel, US, Canada, UK, and Europe. The company was founded in 2005 and has over 1000 multi-disciplinary innovation experts who serve a broad range of companies, from small startups to large enterprises in multiple business sectors. Commit specializes in advanced technologies and applications with dedicated practices in Cloud, GenAI, Software, IoT, Big Data…
| Field | Value |
|---|---|
| Industry | Software Development |
| Company size | 501-1,000 employees |
| Headquarters | Petah Tikva |
| Organization type | Privately Held |
| Year founded | 2005 |
| Specialties | System DesignSoftware DevelopmentCommunication and NetworksComputingInfrastructureConsolidation & VirtualizationMonitoringControl and BSMData SecurityData Connectivity and Integration |
| Open jobs on Jobsy | 3 |
| View page |
Description
The company secures the AI-driven SDLC from prompt to production, unifying development and cloud context to stop vulnerabilities at the source. The Security Research group is hiring a senior, hands-on Application Security Researcher to push modern AppSec forward — working with engineers, researchers and AI/data scientists on next-generation detection, including autonomous, agentic pen-testing capabilities. This is a build-and-break role, not a typical AppSec position.
Requirements
Must-have skills:
- 5+ years hands-on in offensive security, vulnerability research, or application security
- Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains
- Strong coding in Python, Go, or similar, with production-quality code shipped
- Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives
- Solid grasp of modern stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider
- Hands-on use of LLMs / AI models for security tasks, with the judgment to measure where they help and where they fail
- Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy
- Takes research ideas from prototype to production with minimal guidance
- Clear written communication — can explain a complex attack path to engineers and product managers
- M.Sc. in Computer Science, Cyber Security, or a related field
Nice to have:
- Published research, CVEs, conference talks, or a bug bounty track record
- Experience building AI agents or evaluation frameworks for LLMs
- Background in exploit development, red teaming, or penetration testing
- Code analysis techniques (taint analysis, call graphs, reachability)
- Contributions to open-source security tools
Journal
Only you can see this. Kept on this device, and in your account when you sign in.