Application Security Analyst

About Us

Legit Security is a cybersecurity company offering an enterprise ASPM platform that secures organizations' software supply chains across both on-premises and cloud environments. Our mission is to protect businesses from emerging threats targeting software development processes, ensuring secure software is built from the ground up.

What You’ll Do

• Lead or participate in deep research initiatives around SAST, SCA, secrets exposure, misconfigurations, AI security, and more
• Develop detection rules and security signatures for static code analysis engines
• Analyze code bases, pipelines, and development environments to map and model real-world attack vectors
• Investigate new vulnerabilities, CVEs, and package-related risks
• Collaborate with analysts and researchers to produce actionable security insights and detection logic
• Work closely with engineering teams to transform research into scalable security features
• Balance high-level threat modeling with hands-on technical deep-dives

What you’ll bring

• Proven experience in Application Security / Product Security / Security Research roles
• Strong coding skills – able to read and analyze code confidently (at least in one language such as Python, JavaScript, Go, etc.)
• Hands-on experience with AppSec tools such as SAST/SCA/Secrets Scanners (e.g., CodeQL, Semgrep, TruffleHog, GitGuardian, etc.)
• Deep understanding of common vulnerabilities, secure development practices, and real-world exploit scenarios
• Comfortable switching between technical implementation and broader threat understanding
• Bonus: Experience with bug bounty programs, vulnerability disclosures, or writing security content
• Bonus: Experience using or building AI/ML models in the context of cybersecurity

Why Join Us?

• Direct impact on a cutting-edge ASPM product used by security teams globally
• A research-driven culture that values depth, accuracy, and creativity
• Opportunities to work across the full spectrum of AppSec – from code to cloud to CI/CD
• A collaborative, highly technical environment with room for growth and innovation