Security Researcher

About Us

Planck Technologies is a company specialized in Software Development, dedicated to shaping futures and creating value through innovative IT solutions. By expanding teams and offering a comprehensive range of services from Software Development and Infrastructure Management to Cybersecurity we empower clients with all the expertise they need in one place. Inspired by the principles of quantum physics, we push beyond traditional boundaries to deliver customized solutions that redefine the IT landscape and drive shared success.

What are we looking for?

• Proven professional experience in Application Security, Security Research, Web Application Penetration Testing, Secure Development, Secure Code Review, or similar areas;
• Strong knowledge of Application Security, including vulnerabilities, mitigations, secure coding practices, and security concepts;
• Experience researching the security aspects of programming languages, frameworks, and technologies;
• Experience with secure code review and vulnerability analysis across different programming languages and frameworks;
• Familiarity with both interpreted and compiled programming languages;
• Ability to independently learn new programming languages, technologies, and frameworks;
• Familiarity with software development and associated methodologies;
• Strong analytical and problem-solving skills, with the ability to investigate complex security challenges;
• Excellent organizational, interpersonal, and communication skills;
• Ability to manage multiple requests and priorities in a fast-paced environment;
• Proficiency in English, both written and spoken.

Nice to Have

• Experience working with SAST, SCA, DAST, or other Application Security / AST solutions;
• Experience designing, refining, or validating security detection rules and logic;
• Experience analyzing and improving the results of automated security analysis tools;
• Experience across multiple programming languages, frameworks, and technology ecosystems;
• Experience supporting developers and technical stakeholders on Application Security topics;
• Experience mentoring junior security researchers or sharing knowledge within a technical team.

What will you do?

• Research the security aspects of multiple programming languages, frameworks, and technologies, working with depth and autonomy;
• Perform secure code reviews and analyze results produced by Application Security / AST solutions;
• Identify security gaps, false positives, false negatives, and opportunities for improvement in automated security analysis;
• Analyze code containing a wide range of vulnerabilities across different programming languages and frameworks;
• Propose improvements based on Application Security expertise to enhance AST solutions and their capabilities;
• Contribute to SAST, SCA, DAST, and other Application Security solutions;
• Design, refine, and validate detection logic and security rules that improve vulnerability detection capabilities;
• Investigate complex security scenarios and translate findings into actionable improvements;
• Support developers and relevant stakeholders with Application Security guidance and expertise;
• Share knowledge across the team through documentation, peer reviews, and technical discussions;
• Mentor less-experienced researchers and contribute to the continuous development of the team's technical expertise;
• Collaborate with other security and technology teams to drive innovation and continuously improve Application Security capabilities.

Location: Braga

Working Model: 2 days per week in the office

We're waiting for you! 🚀