Appsec Office Security Research Osint Specialist

💼 Full-time💰 $25–$25🗓 2026-07-28

Core

Conducting application security assessments, security research, and OSINT to identify vulnerabilities and support proactive security initiatives.

Role type

Senior Application Security and OSINT Researcher

Builds

Secure application architectures and threat intelligence reports

Domain

Cybersecurity / Application Security / OSINT

Deliverable

Required skills

Application security assessments, API security testing, secure code reviews, threat modeling, CVE analysis, exploit validation, asset discovery, attack surface mapping, threat intelligence gathering, security automation, custom scripting, penetration testing methodologies, vulnerability management

Preferred skills

Cloud security concepts, modern web application architectures, OSCP, CEH, GWAPT, CISSP

Technologies

Burp Suite, proxies, security testing tools

Responsibilities

Perform secure code reviews and application security assessments, Conduct API security testing and secure architecture reviews, Identify vulnerabilities aligned with OWASP Top 10 and API Top 10, Support threat modeling activities using STRIDE and PASTA frameworks, Conduct vulnerability discovery and security research activities, Perform CVE analysis, exploit validation, and zero-day research, Perform asset discovery and attack surface mapping, Gather and analyze threat intelligence from open-source platforms

Seniority

Senior, hands-on IC

Rewrite

## About the Role We are looking for experienced cybersecurity professionals with strong expertise in Application Security, Security Research, and OSINT. The role involves identifying vulnerabilities, conducting advanced security assessments, threat intelligence gathering, and supporting proactive security initiatives across applications and infrastructure. ## Key Responsibilities ### Application Security - Perform secure code reviews and application security assessments - Conduct API security testing and secure architecture reviews - Identify vulnerabilities aligned with OWASP Top 10 and API Top 10 - Support threat modeling activities using STRIDE, PASTA, and related frameworks - Collaborate with development teams to improve secure coding practices ### Office Security Research - Conduct vulnerability discovery and security research activities - Perform CVE analysis, exploit validation, and zero-day research - Assess enterprise environments for security gaps and attack vectors - Develop proof-of-concepts and support remediation recommendations ### OSINT & Threat Intelligence - Perform asset discovery and attack surface mapping - Gather and analyze threat intelligence from open-source platforms - Monitor emerging threats, vulnerabilities, and adversary techniques - Support red team and security assessment activities with OSINT insights ## Required Skills & Expertise - Strong hands-on experience in Application Security and Security Research - Expertise in Burp Suite, proxies, and security testing tools - Knowledge of cloud security concepts and modern web application architectures - Experience with security automation and custom scripting/tools - Strong understanding of secure coding standards and SDLC security - Familiarity with penetration testing methodologies and vulnerability management ## Preferred Qualifications - Bachelor's degree in Computer Science, Cybersecurity, or related field - Relevant certifications such as OSCP, CEH, GWAPT, CISSP, or similar are a plus - Strong analytical, problem-solving, and research capabilities ## Why Join Us? - Opportunity to work on advanced security research initiatives - Exposure to real-world threat intelligence and vulnerability discovery - Collaborative and growth-oriented cybersecurity environment - Competitive compensation and long-term career opportunities

Sourced via wellfound · Listed on CareerPlan, which tracks 70,000+ jobs from 20+ sources.