Cyber Security Expert

About the role

We are looking for a Cyber Security Expert to strengthen our application security posture and lead vulnerability research initiatives. The role involves hands‑on discovery of security flaws, secure code review, and the development of remediation strategies for production systems.

Key responsibilities

• Identify and disclose vulnerabilities through CVE research, bug bounty programs, red‑team exercises, and capture‑the‑flag events.
• Conduct secure code reviews and implement production‑grade patches.
• Analyze web security issues such as authentication flaws, session management, OAuth/JWT weaknesses, SSRF, and injection attacks.
• Assess cryptographic weaknesses, including timing attacks, padding oracles, and misuse patterns.
• Evaluate filesystem security problems like TOCTOU, symlink attacks, and path traversal.
• Build, configure, and use security testing tools (SAST, fuzzing, IAST) to automate detection.

Required profile

• Minimum 4 years of experience in cybersecurity, application security, or vulnerability research.
• Strong analytical mindset with a deep understanding of modern attack vectors.
• Ability to work independently and collaborate with development teams to remediate findings.

Required skills

• Proficiency in at least two programming languages: Go, Python, Node.js, Rust.
• Experience with SAST, fuzzing, and IAST tools.
• Hands‑on expertise in vulnerability discovery, secure code review, and patching.
• Knowledge of web security, cryptographic attacks, and filesystem exploitation techniques.