Cyber Security Expert

About the role

We are looking for a seasoned Cyber Security Expert to strengthen our application security posture. You will lead vulnerability discovery initiatives, perform secure code reviews, and develop robust security tooling.

Key responsibilities

• Identify and disclose vulnerabilities through CVE research, bug bounty programs, red‑team exercises, and capture‑the‑flag events.
• Conduct secure code reviews and implement production‑grade patches.
• Analyze web security mechanisms, including authentication, session management, OAuth, and JWT implementations.
• Detect and mitigate SSRF, injection, access‑control, cryptographic, and filesystem vulnerabilities.
• Design, build, or integrate security tools such as SAST, fuzzers, and IAST solutions.

Required profile

• Minimum 4 years of hands‑on experience in cybersecurity, application security, or vulnerability research.
• Deep understanding of web security, cryptographic flaws, and filesystem attack vectors.
• Proven experience with vulnerability discovery in real‑world environments.
• Ability to work independently and mentor junior team members.

Required skills

• Vulnerability discovery (CVE exposure, bug bounty, red teaming, CTFs)
• Secure code review and patching
• Web security (authentication, sessions, OAuth, JWT)
• SSRF, injection, access‑control, timing attacks, padding oracles
• Filesystem vulnerabilities (TOCTOU, symlink attacks, path traversal)
• Security tooling (SAST, fuzzing, IAST)
• Programming languages: Go, Python, Node.js, Rust (at least two)