qa engineer (manual) in application security

JFrog develops software products and provides application security solutions. Its security research team focuses on offensive security testing, automated exploit discovery, and advanced application security research.

• Help reshape the company Product Security;
• Plan and execute advanced penetration testing campaigns;
• Develop tools and frameworks for scalable security testing and fuzzing;
• Lead security innovation by building and managing penetration testing tools and AI Agents;
• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept;
• Identify systemic product weaknesses and help define long-term mitigations;
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities;
• Contribute to security research publications, CVE submissions, and industry knowledge sharing;
• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.

• 4+ Years of experience in research and penetration testing;
• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies;
• Knowledge and experience in AI and LLM penetration testing;
• Experience with penetration testing tools such as Burp Suite and Metasploit, and custom security tools development;
• Familiarity with modern architectures, including cloud, microservices, containers, and Kubernetes;
• Familiarity with secure software architecture and typical attack vectors;
• Ability to conduct security testing engagements and report technical findings effectively;
• Nice to have: experience building or integrating automated PT or fuzzing pipelines.

• Relocation to Barcelona.