16 Oct
|
OX Security
|
Toronto
16 Oct
OX Security
Toronto
About The PositionOX Security secures the AI-driven SDLC from prompt to production. We eliminate critical, real-time risks from AI code generation through cloud runtime by doing what conventional tools can’t: unifying development and cloud context to stop vulnerabilities right at the source. At OX, we’re building the future of cyber security for the AI era. If you’re looking to work on disruptive technology with an amazing team, you belong here.About The PositionOX Security secures the AI-driven SDLC from prompt to production. We eliminate critical, real-time risks from AI code generation through cloud runtime by doing what conventional tools can’t: unifying development and cloud context to stop vulnerabilities right at the source. At OX, we’re building the future of cyber security for the AI era. If you’re looking to work on disruptive technology with an amazing team, you belong here.We’re looking for a highly skilled Application Security Researcher to join our Security Research group and help us push the boundaries of modern App Sec. This is a critical, hands‑on role where you’ll work closely with engineers, researchers, and AI & data scientists to build the next generation of application security - including autonomous, agentic pen testing capabilities.This is not a typical App Sec role. You’ll be building, breaking, and redefining how offensive security works at scale.What You’ll Be DoingResearch vulnerability chaining, business-logic flaws, and complex attack paths across applications and infrastructureDesign and build detection engines and decision-making logic for autonomous security systemsEvaluate AI models for application security use cases, measuring where they perform and where they fall shortPrototype, build, and ship security capabilities into production environmentsAnalyze large-scale security data to uncover exploitable attack paths and improve detection accuracyPartner with Product, Engineering,
and Data teams to shape the next generation of security featuresHelp set the team's research direction and own initiatives end to end, from idea to shipped capabilityRequirementsM. Sc. in Computer Science, Cyber Security, or a related field5+ years of hands‑on experience in offensive security, vulnerability research, or application securityDeep understanding of web application and API vulnerabilities, including business-logic flaws and multi‑step attack chainsStrong coding skills in Python, Go, or a similar language, with experience shipping production‑quality codeExperience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positivesSolid grasp of up-to-date application and infrastructure stacks: CI/CD pipelines, containers, Kubernetes, and at least one major cloud providerHands‑on experience using LLMs or AI models for security tasks, and the judgment to measure where they help and where they failComfort working with large datasets (SQL, Big Query, or similar) to drive research and measure detection accuracyAbility to take a research idea from prototype to production with minimal guidance Clear written communication: you can explain a complex attack path to engineers and product managersNice to HavePublished research, CVEs, conference talks, or bug bounty track recordExperience building AI agents or evaluation frameworks for LLMsBackground in exploit development, red teaming, or penetration testingExperience with code analysis techniques (taint analysis, call graphs, reachability)Contributions to open-source security toolsBenefits Package (via Vensure)We partner with Vensure to provide top-tier benefits for our Canada-based team members:Comprehensive Health Coverage: Medical, Dental, and Vision plans to keep you and your family healthy.Unlimited Paid Time Off (PTO): We offer unlimited vacation because we trust you to take time when you need it and to manage your time effectively. We value work‑life balance and want you to recharge.Gifts on your birthday & anniversary, & Holidays.#J-18808-Ljbffr
📌 Application Security Researcher (Toronto)
🏢 OX Security
📍 Toronto