Application Security Research Team Lead

CommIT•Long Grove, IL

About The Position

We’re building the software that runs the world—and we’re looking for people who want to grow, innovate, and make an impact. This is a place with a unique combination of technical excellence, strong spirit, and talented people. If you’re willing to go the extra mile, your career can truly take off. Since software plays a central role in everyday life, you’ll be contributing to a mission that truly matters. Trusted by thousands of customers, including many Fortune 100 companies, the platform helps organizations manage, accelerate, and secure their software delivery from code to production—an approach often referred to as liquid software. Joining this journey means being part of something both impactful and forward-thinking. The Chief Security Office is seeking an Application Security Team Lead. In this role, you will lead a team of security researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research. Your work will directly influence the security posture of enterprise-grade products and help scale secure-by-design principles across the organization. This is a hands-on technical leadership role with a strong emphasis on offensive security, code exploitation, automation, and innovation.

Requirements

Proven 2+ years of experience in leading application security research Teams (SAAS or software company).
7+ year experience in Research and penetration testing.
Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies.
AI and LLM Penetration testing knowldge and Experience
Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and Custom Security Tools development.
Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes).
Familiarity with secure software architecture and typical attack vectors.
Demonstrated ability to lead security testing engagements and report technical findings effectively.
Experience building or integrating automated PT or fuzzing pipelines is a strong advantage.
Knowledge and hands-on experience with SSDLC tools and CI/CD pipelines

Nice To Haves

Publications or open-source contributions in the security domain are a plus.

Responsibilities

Build and lead a team of security researchers and penetration testers.
Help to reshape company Product Security
Plan and execute advanced penetration testing campaigns.
Develop tools and frameworks for scalable security testing and fuzzing.
Lead Security innovation by building and managing penetration testing tools \ AI Agents
Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept.
Identify systemic product weaknesses and help define long-term mitigations.
Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
Contribute to security research publications, CVE submissions, and industry knowledge sharing.
Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.