--- title: 'Senior Research Engineer | Cybersecurity AI AppSec at Escape Technologies' canonical: 'https://feeny.ai/job/senior-research-engineer-cybersecurity-ai-appsec-escape-technologies-paris-27m0d02hhys5' type: 'job' last_seen: '2026-10-13' --- # Senior Research Engineer | Cybersecurity AI AppSec at Escape Technologies - **Company:** Escape Technologies - **Location:** Paris, France - **Compensation:** €80k–€90k - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-09-17 - **Last confirmed live:** 2026-10-13 - **Apply:** https://jobs.ashbyhq.com/escape/2384716d-587f-4ff2-a7e9-dd8557e49920 ## Job description Location: Paris (75002) | Hybrid (2 days remote/week) ## About Escape Join Escape, a fast-growing leader in AI-powered cybersecurity. Our mission-driven engineering team (21 engineers, 4 technical leads, 3 product owners) is dedicated to redefining application security with cutting-edge detection and automation. We operate at the forefront of technology and research from our Paris office. ## About the Role As a Senior Research Engineer you will work in a team with talented security researchers. You’ll champion innovation, and ensure research translates into impactful production solutions. ## What You'll Do - Agentic scanning systems: Build systems that autonomously explore applications, maintain context, and execute complex testing strategies. - Security detection engine: Design and implement reliable, production-grade vulnerability detection logic (injection, auth issues, business logic flaws, etc.). - AI-driven testing: Integrate LLMs and structured reasoning into scanning workflows to improve coverage and reduce false positives. - Distributed infrastructure: Work on systems that orchestrate thousands of concurrent scans (Kubernetes, queues, resource management). - Performance & reliability: Ensure scans are fast, deterministic, and cost-efficient despite high complexity and concurrency. - Core platform design: Contribute to architecture decisions around memory systems, execution environments, and data models. Our Tech Stack & Focus - Languages: Python (primary), Go (performance/network components) - Runtime: Containerized workloads on Kubernetes (EKS), supporting long and resource-intensive scans - Scaling: Kubernetes Jobs & queue-driven autoscaling - Web Automation: Playwright + headless Chromium - Data: PostgreSQL, S3-compatible object storage, Redis (limited use) - Messaging: Kafka - Observability: OpenTelemetry, Grafana Cloud - CI/CD & Infra: GitLab CI, Terraform ## Perks & Benefits - πŸ’Έ Significant equity (Stock Options/BSPCE) – become a core stakeholder in Escape’s journey - β€οΈβ€πŸ©Ή Top-tier health insurance with Alan - πŸ• Meal vouchers with Swile - πŸ’ͺ EGYM Wellpass sport subscription - πŸ“š Continuous learning: budgets for books and online courses - πŸ’» Premium equipment to support your work - 🎁 Dedicated time for open-source projects - 🌍 Present research at top international conferences (RSAC, BlackHat, DEFCON, BSides, APIDays) ## About You - 4+ years of experience in backend engineering, security research, or applied R&D in a product environment - Strong software engineering fundamentals and ability to work across domains (systems, networking, web architectures) - Proficient in at least one backend language (Python, Go, or similar) - Experience designing and shipping production systems with measurable impact - Ability to translate complex ideas or research into reliable, scalable implementations - Strong analytical mindset, with a focus on pragmatism and impact - Comfortable collaborating across engineering and security to deliver end-to-end solutions Nice to have: - Experience in application security (web security, pentesting, bug bounty, etc.) - Exposure to AI/LLM-based systems - Familiarity with browser automation or large-scale distributed systems - Ready to lead the next wave of AI-powered vulnerability detection? Apply now to join Escape and make a real impact in cybersecurity! ## About Escape Technologies ## Company Overview - **One-liner**: Escape provides an AI-powered offensive security platform that automates discovery, pentesting, and remediation of vulnerabilities in web applications and APIs. - **Entity Type**: Private (YC W23) - **Headquarters**: New York, USA (with a significant office in Paris, France) - **Founded**: 2020 - **Founders**: Antoine Carossio (Co-founder & CTO), Tristan Kalos (Co-founder & CEO) ## Core Business - **Primary industry**: Cybersecurity (Application Security / Offensive Security) - **Target customers**: B2B; Security teams in medium and large organizations, including Fortune 1000 companies, and engineering teams needing integrated security testing. - **Mission / Purpose**: To help security teams who are "100x outnumbered" by automating offensive security end-to-end, replacing legacy scanners and manual processes with AI agents that work directly in engineering workflows. ## Products & Services - **AI Pentesting**: AI agents that autonomously discover, analyze, and exploit complex, multi-step vulnerabilities, including business logic flaws. Provides proof of exploitability with screenshots and execution logs. - **Business-Logic-Aware DAST (Dynamic Application Security Testing)**: Scans modern web applications (including SPAs) and APIs for vulnerabilities, providing detailed, developer-friendly remediation steps. Integrates directly into CI/CD pipelines. - **Attack Surface Management (ASM)**: Automatically discovers, classifies, and tracks all internal and external assets (web apps, APIs, microservices) without needing agents or network traffic analysis. - **AI-Powered Remediation**: Delivers real code suggestions tailored to the target framework (e.g., React, Django, Spring Boot) and integrates with AI-assisted IDEs like Cursor, Claude Code, and Gemini. - **Compliance Validation**: Provides continuous validation for frameworks like PCI-DSS, HIPAA, SOC 2, and ISO 27001, generating audit-ready reports with proof of testing. ## Market Standing - **Valuation**: Not publicly disclosed. - **Key Metric**: Raised $18M in Series A funding (announced Mar 2026). - **Notable Investors**: Y Combinator (W23 batch). - **Growth Signals**: Trusted by 2,000+ security teams worldwide. Reports a 229% increase in detection compared to legacy tools. Has a 32-person team with +8.8% monthly headcount growth. Published research on discovering 2,000+ high-impact vulnerabilities in "vibe coding" platforms. 20 active job postings. ## Competitive Advantages - **Business Logic Awareness**: Unlike legacy DAST scanners that only check for known payloads, Escape tests workflows, access controls, and multi-step processes unique to each application. - **Agentic Attack Reasoning**: Uses a "Graph context" to find complex, multi-step attack chains that traditional tools miss. - **Developer-Friendly Output**: Provides visual proof (screenshots, exploitation graphs) and tailored remediation code, not generic suggestions, leading to higher trust and faster fixes from engineering teams. - **Extremely Low False Positive Rate**: Claims a ≀4% false positive rate, a critical differentiator in security tools. - **Deep Integrations**: Natively integrates with Wiz for a unified risk view and with AI-assisted IDEs for end-to-end automated remediation. ## Strategic Focus - **AI-First Automation**: Replacing manual penetration testing and bug bounty programs with scalable, AI-driven autonomous agents. - **Embedding into Developer Workflows**: Moving security left by integrating directly into CI/CD, code repositories, and developer IDEs to make remediation seamless. - **Expanding Coverage**: Continuously adding support for new frameworks, compliance standards, and attack vectors (e.g., front-end & SPA testing in beta). - **Commercial Growth**: Scaling the sales and customer success teams (active hiring for Account Executives, Sales Engineers, and Customer Success roles) to capture a larger share of the enterprise market. ## Why Work Here - **High-Growth Startup**: Part of Y Combinator (W23), recently raised an $18M Series A, and is growing its team rapidly (+8.8% monthly). - **Cutting-Edge Tech**: Work at the intersection of cybersecurity and generative AI, building autonomous agents that solve real, complex problems. - **Hybrid Work Model**: Roles are a mix of remote and in-office, with key offices in New York City and Paris. - **Engineering-Centric Culture**: The largest department is technical (19% of team). The platform is built by engineers for engineers, with a focus on solving complex business problems with creative technology. - **Strong Product Traction**: Over 2,000 security teams as customers provides a strong foundation and real-world impact. ## Sources 1. [escape.tech](https://escape.tech/) 2. [Y Combinator - Escape](https://www.ycombinator.com/companies/escape) 3. [LinkedIn - Escape](https://www.linkedin.com/company/escapetech) 4. [Escape Documentation](https://docs.escape.tech/documentation/introduction/introduction-to-escape/) 5. [Tracxn - Escape](https://tracxn.com/d/companies/escape/__jSfAJDiLH8_Hz29Gb26cwX6eydH7yPCsqpAKg3gj11Q) ## Other roles at Escape Technologies - [Junior Full Stack Engineer | AI & Security](https://feeny.ai/job/junior-full-stack-engineer-ai-security-escape-technologies-paris-ra88kx80xeq2) β€” Paris, France - [Senior Full Stack Engineer | AI & Security](https://feeny.ai/job/senior-full-stack-engineer-ai-security-escape-technologies-paris-2aa5g0em1gge) β€” Paris, France - [Technical Account Manager | AI AppSec](https://feeny.ai/job/technical-account-manager-ai-appsec-escape-technologies-new-york-cmmhqmpgg5eg) β€” New York, NY - [Account Executive Nordics/UK - AI & Security](https://feeny.ai/job/account-executive-nordics-uk-ai-security-escape-technologies-sweden-95fky59agm6v) β€” Sweden - [Sales Director US | AI AppSec](https://feeny.ai/job/sales-director-us-ai-appsec-escape-technologies-new-york-7x7qh06mk7x2) β€” New York, NY