The company secures the AI-driven SDLC from prompt to production, unifyingdevelopment and cloud context to stop vulnerabilities at the source. TheSecurity Research group is hiring a senior, hands-on Application SecurityResearcher to push up-to-date AppSec forward — working with engineers, researchersand AI/data scientists on next-generation detection, including autonomous,agentic pen-testing capabilities. This is a build-and-break role, not a typicalAppSec position.Requirements
5+ years hands-on in offensive security, vulnerability research, orapplication securityDeep understanding of web application and API vulnerabilities, includingbusiness-logic flaws and multi-step attack chainsStrong coding in Python, Go, or similar, with production-quality code shippedExperience building or tuning detection logic (SAST, DAST, SCA, secrets, orcustom rule engines) and reducing false positivesSolid grasp of up-to-date stacks: CI/CD pipelines, containers, Kubernetes,



and atleast one major cloud providerHands-on use of LLMs / AI models for security tasks, with the judgment tomeasure where they help and where they failComfort with large datasets (SQL, BigQuery, or similar) to drive research andmeasure detection accuracyTakes research ideas from prototype to production with minimal guidanceClear written communication — can explain a complex attack path to engineersand product managersM.Sc. in Computer Science, Cyber Security, or a related fieldNice to have
Published research, CVEs, conference talks, or a bug bounty track recordExperience building AI agents or evaluation frameworks for LLMsBackground in exploit development, red teaming, or penetration testingCode analysis techniques (taint analysis, call graphs, reachability)Contributions to open-source security tools
J-18808-Ljbffr

📌 Senior Application Security Researcher Winnipeg
🏢 Kibbi
📍 Winnipeg