Sonar Source

1 month ago

Application Security Researcher

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Join Sonar Source as an Application Security Researcher in Bochum to advance SAST capabilities. You’ll define how security rules detect common vulnerabilities, work with developers to improve detection, and drive innovations across language ecosystems, contributing to a leading AI code review platform.

Location: Germany

Workplace: Onsite

Employment Type: Full time

Job Function: Research & Scientific (R&D)

Key Responsibilities

•Define and refine static analysis rules to detect vulnerabilities across language ecosystems.
•Investigate how vulnerabilities manifest in code and identify remediation strategies.
•Collaborate with static analysis developers to specify, validate, and communicate security rules and detections.
•Engage with user communities to gather feedback and improve vulnerability reports and rule accuracy.
•Drive innovation to enhance the SAST engine and provide actionable guidance to developers.

Key Requirements

•Master at least one programming language and its development environment
•Strong understanding of application security fundamentals and common vulnerabilities
•Developer mindset with ability to work across unknown codebases and contribute secure code
•Excellent communication skills and ability to work with non-security stakeholders
•Nice-to-have understanding of static analysis mechanisms and ability to challenge rule implementations

Experience:Application securitySASTStatic analysisSecurity rules

Skills:CommunicationAutonomyTeam collaborationProblem-solving

Languages:English

Tech Stack:SASTStatic analysisTaint analysisCoding

Company Brief

Sonar Source

Builds static code analysis and continuous inspection tools (SonarQube, SonarCloud, SonarLint) that identify bugs, vulnerabilities, and code smells across multiple languages to help teams improve code quality and maintainability.

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Geneva, Switzerland

Founded: 2008

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Sonar Source

1 month ago

Application Security Researcher

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Location: Germany

Workplace: Onsite

Employment Type: Full time

Job Function: Research & Scientific (R&D)

Key Responsibilities

•Define and refine static analysis rules to detect vulnerabilities across language ecosystems.
•Investigate how vulnerabilities manifest in code and identify remediation strategies.
•Collaborate with static analysis developers to specify, validate, and communicate security rules and detections.
•Engage with user communities to gather feedback and improve vulnerability reports and rule accuracy.
•Drive innovation to enhance the SAST engine and provide actionable guidance to developers.

Key Requirements

•Master at least one programming language and its development environment
•Strong understanding of application security fundamentals and common vulnerabilities
•Developer mindset with ability to work across unknown codebases and contribute secure code
•Excellent communication skills and ability to work with non-security stakeholders
•Nice-to-have understanding of static analysis mechanisms and ability to challenge rule implementations

Experience:Application securitySASTStatic analysisSecurity rules

Skills:CommunicationAutonomyTeam collaborationProblem-solving

Languages:English

Tech Stack:SASTStatic analysisTaint analysisCoding

Company Brief

Sonar Source

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Geneva, Switzerland

Founded: 2008

Website LinkedIn