JFROG: Application Security Engineer (relocation to Barcelona)
Core
Application Security Engineer focused on offensive security testing, automated exploit discovery, and advanced application security research to scale secure-by-design principles.
Role type
Senior IC Application Security Engineer (Offensive Security)
Builds
Penetration testing tools, AI Agents, and automated security testing frameworks
Domain
Cybersecurity / Application Security / Offensive Security
Deliverable
production ML models
Required skills
Offensive security testing, Code exploitation, Automation, AI/LLM Penetration testing, Vulnerability analysis, Root cause analysis, Tool development, CI/CD pipeline integration, Cloud-native architecture
Preferred skills
Fuzzing, SSDLC tools, Security research publications
Technologies
Burp Suite, Metasploit, Kubernetes, CI/CD pipelines, AI Agents
Responsibilities
Plan and execute advanced penetration testing campaigns, Develop tools and frameworks for scalable security testing and fuzzing, Lead Security innovation by building and managing penetration testing tools and AI Agents, Analyze vulnerabilities and develop proofs of concept, Collaborate with engineering teams to reproduce and fix vulnerabilities, Contribute to security research publications and CVE submissions
Seniority
Senior, hands-on IC
