Senior Security Researcher

Verified Active

Belarus · Other · Senior

✓ Direct ATS✓ Not duplicate✓ Fresh

Match score

See how well you match this role, and what's worth sharpening before you apply.

Everything to know before you send your CV

We've gathered AI tools to check your fit, sharpen your CV, and prep for the interview.

Fit & gaps

Company careers page

We couldn't find a direct apply link for this specific role. Browse the company's official careers page for open positions.

Visit the company's careers page

Is this role relevant for you?

Full company profile

CCommIT

Actively hiringAttractivenessBStability~B

Recent development · Jan 18, 2026
Israel's Commit acquires Africa-focused tech recruiter Savannah in strategic talent expansion

Full company profile ›

✦ Unique Trevo insight

Best time to apply

17:30–19:30

Trevo knows the best time to send your CV for this role.

More roles at this company

Cyber Security Analyst Lead (SOC/SecOps)Israel
SOC AnalystPhilippines
Software Engineer and Security ResearcherPoland
Senior Data & AI Solution ArchitectUkraine
Application Security Research EngineerSpain

Get Cyber & Security jobs on Telegram

The freshest, most credible roles in your field, every day, on your phone.

Join channel

‹ Back to jobs

CommIT

Job description

About the role

The company is the pioneer of Active ASPM, purpose-built to secure the modern software supply chain in the age of AI. While traditional tools overwhelm teams with endless alerts, company cuts through the noise to identify the critical 5% of risks — those that are truly reachable and exploitable. From GenAI-generated code to cloud runtime, the company gives developers and security teams the visibility and automation needed to ship secure software, faster. We're looking for a highly skilled, driven Security Researcher to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of company.

Requirements

5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
Proven ability to ship software in a production environment
Strong understanding of the SDLC and modern CI/CD pipelines
Comfortable leveraging AI tools to optimize research and development processes
Proactive and independent mindset, with the ability to take full ownership of projects

Nice to have

Active contributions to open-source security tools or research projects
Hands-on experience with decompilers, debuggers, and network traffic analysis
Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
Web application penetration testing experience
Published CVEs, coordinated disclosures, writeups, blogs, or research papers
Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

Tech stack

CloudGenAIAIPenetration TestingMavenCi/cd