Cybersecurity Expert – Offensive Security & Vulnerability Research

Job Overview

We are looking for an experienced Cybersecurity Expert with strong hands-on experience in penetration testing, vulnerability research, application security, and secure code analysis.

In this role, you will work at the intersection of offensive security, defensive engineering, and AI evaluation. You will design and develop realistic security scenarios to evaluate advanced AI models' ability to identify vulnerabilities, understand complex attack patterns, analyze source code, and recommend effective security fixes.

The ideal candidate should have practical experience in identifying and exploiting application vulnerabilities, conducting penetration tests, performing security assessments, and implementing remediation strategies.

This is not a traditional cybersecurity monitoring role. We are specifically looking for professionals with strong offensive security experience who can think like an attacker while applying defensive engineering principles.

Key Responsibilities

- Design and develop multi-vulnerability codebases across programming languages such as Go, Python, Node.js, and Rust.
- Identify, analyze, and reproduce security vulnerabilities in application source code.
- Create realistic multi-stage attack chains by combining different vulnerability classes.
- Perform penetration testing and simulate real-world attacks to identify application security weaknesses.
- Develop adversarial security scenarios to evaluate AI models' vulnerability detection and reasoning capabilities.
- Build reproducible security evaluation environments using Docker and containerized infrastructure.
- Develop automated security test cases, exploit verification scripts, and vulnerability assessment frameworks.
- Conduct secure code reviews and recommend production-grade security patches.
- Analyze AI-generated security assessments and identify gaps in vulnerability detection and remediation.
- Create challenging scenarios involving obfuscated code, misleading documentation, and complex application logic.




- Work with real-world CVE-based vulnerabilities and synthetic vulnerability scenarios.
- Ensure security evaluation tasks are deterministic, scalable, reproducible, and reliable.

Required Skills & Qualifications

- Minimum 4+ years of experience in cybersecurity, application security, penetration testing, or vulnerability research.
- Strong hands-on experience in penetration testing, ethical hacking, vulnerability discovery, and application security assessments.
- Experience identifying and exploiting vulnerabilities through bug bounty programs, red teaming, CTFs, or professional security engagements.
- Ability to read, analyze, and review source code to identify security flaws and potential attack vectors.
- Solid understanding of both offensive and defensive security practices.

Technical Security Expertise

Candidates should have practical knowledge of:

- Web application security, including authentication, session management, OAuth, and JWT vulnerabilities.
- Server-Side Request Forgery (SSRF).
- Injection vulnerabilities, including command injection, template injection, and environment-related injection.
- Broken access control and authorization vulnerabilities.
- Cryptographic vulnerabilities, including timing attacks, padding oracle attacks, and cryptographic implementation weaknesses.
- Filesystem vulnerabilities, including TOCTOU, symlink attacks, and path traversal.
- Vulnerability discovery, exploitation, mitigation, and secure code patching.
- Static Application Security Testing (SAST), fuzzing, and Interactive Application Security Testing (IAST).

Programming & Technical Skills

- Proficiency in at least one of the following programming languages:
- Python
- Go
- Node.js
- Rust
- Hands-on experience with Docker and containerized environments.




- Good understanding of Linux internals and system-level behavior.
- Experience writing automated security tests using pytest or similar testing frameworks.
- Ability to analyze complex, obfuscated, or minified source code.
- Familiarity with security testing tools, vulnerability scanners, and automated assessment frameworks.

What We Are Specifically Looking For

We are particularly interested in candidates who:

- Have strong practical penetration testing experience rather than only theoretical cybersecurity knowledge.
- Can independently identify vulnerabilities by reviewing application source code.
- Understand how to exploit vulnerabilities and demonstrate their real-world impact in authorized testing environments.
- Can think from both an attacker's and a defender's perspective.
- Have experience developing proof-of-concept exploits and validating security fixes.
- Can reason through complex, multi-stage attack scenarios.
- Are comfortable working with multiple programming languages and application architectures.

Work Schedule & Availability

- 8 hours of work per day.
- Minimum 40 hours per week.
- At least 4 hours of overlap with PST working hours.
- Candidates must be available for the full 3-month contract duration.

Compensation & Contract Details

- Compensation: ₹2.73 LPM.
- Contract Duration: 3 Months.
- Engagement Type: Short-Term Contract.
- Work Arrangement: Remote.

Who Should Apply?

Professionals with experience in the following areas are encouraged to apply:

- Penetration Testing / Ethical Hacking
- Application Security Engineering
- Offensive Security / Red Teaming
- Vulnerability Research
- Security Research and Exploit Development
- Secure Code Review
- Product Security Engineering

Important: Candidates with hands-on penetration testing, vulnerability discovery, source code analysis, and exploitation experience will be preferred.

If you are passionate about application security, identifying complex vulnerabilities, and building realistic sec

Pay: From ₹230,000.00 per month

Experience:

- Cybersecurity Expert: 4 years (Required)

Work Location: Remote

📌 Cybersecurity Expert (India)
🏢 oak tree software solutions
📍 India