Cybersecurity Expert

About this job

Cybersecurity Expert – Penetration Testing & Application Security

• Experience: 4+ Years Contract
• Duration: 3 Months Payout: ₹2.73 LPM
• Work Mode: Remote Availability: 8 hours/day with 4 hours of PST overlap Engagement: Short-Term Contract

Job Overview

We are looking for experienced Cybersecurity Experts with strong hands-on experience in penetration testing, application security, and vulnerability research.

The role involves identifying application vulnerabilities, analyzing source code, developing realistic attack scenarios, and building security evaluation tasks to test advanced AI models.

Candidates should have experience in both offensive security (finding and exploiting vulnerabilities) and defensive security (code review, remediation, and security patching).

Key Responsibilities

• Perform penetration testing and identify vulnerabilities in applications and source code.
• Design applications containing multiple security vulnerabilities (multi-CWE).
• Develop multi-stage attack chains combining different vulnerability types.
• Create security test cases and automated exploit verification checks.
• Build reproducible testing environments using Docker.
• Conduct secure code reviews and recommend vulnerability fixes.
• Analyze AI-generated security responses and identify weaknesses.
• Work with real-world CVEs and synthetic vulnerability scenarios.

Required Skills

• 4+ years of experience in Cybersecurity, Application Security, or Vulnerability Research.
• Strong hands-on experience in Penetration Testing, Bug Bounty, Red Teaming, or CTFs.
• Strong understanding of OWASP Top 10, CWE, and CVE.
• Knowledge of SSRF, SQL Injection, Command Injection, XSS, JWT, OAuth, IDOR, and Path Traversal.
• Proficiency in at least one programming language: Python, Go, Node.js, or Rust.
• Experience with Secure Code Review, SAST, DAST, IAST, or Fuzzing.
• Familiarity with Docker, Linux, and automated testing frameworks such as Pytest.
• Ability to analyze complex or obfuscated source code.
• Strong analytical and problem-solving skills.

Preferred Candidate Profile

Candidates with practical experience in

• Web and API penetration testing.
• Vulnerability discovery and exploit development.
• Multi-stage attack scenarios.
• Security automation and vulnerability assessment.
• Application security testing and remediation.

shruti.sharma@oaktreecloud.com

Work Location: Remote