Cyber Security Specialist

Codefeast; Indonesia; On-site; IDR 500,000,000 - 800,000,000; Full time

Job summary

Codefeast is seeking experienced Cybersecurity Experts to build realistic security evaluation tasks for frontier AI models. The role involves identifying vulnerabilities, creating attack scenarios, reviewing insecure code, and building deterministic security testing environments.

You will design multi-vulnerability codebases, craft multi-stage attack chains, assemble Dockerized evaluation environments, and develop automated verifiers and exploit checks for robust AI security evaluation in

Qualifications

• 4+ years in Cybersecurity, AppSec, Penetration Testing, or Vulnerability Research.
• Experience with offensive and defensive security practices.
• Proficiency in Python, Go, Node.js, or Rust.
• Familiarity with vulnerabilities such as SSRF, injection, access control, JWT/OAuth, path traversal, cryptographic issues, and TOCTOU.

Responsibilities

• Design multi-vulnerability / multi-CWE codebases.
• Build realistic multi-stage attack chains.
• Create Dockerized evaluation environments and automated verifiers.
• Write exploit checks and security test cases.

Skills

Cybersecurity

AppSec

Penetration Testing

Vulnerability Research

Python

Go

Node.js

Rust

Tools

Docker

Job description

Domain: Cybersecurity | Penetration Testing | AppSec | AI Evaluation

Role Overview

We are looking for experienced Cybersecurity Experts to build realistic security evaluation tasks for frontier AI models. The role involves identifying vulnerabilities, creating attack scenarios, reviewing insecure code, and building deterministic security testing environments.

Key Responsibilities

• Design multi-vulnerability / multi-CWE codebases.
• Build realistic multi-stage attack chains.
• Create Dockerized evaluation environments and automated verifiers.
• Write exploit checks and security test cases.

Key Requirements

• 4+ years in Cybersecurity, AppSec, Penetration Testing, or Vulnerability Research.
• Strong experience with offensive and defensive security.
• Proficiency in Python, Go, Node.js, or Rust.
• Familiarity with vulnerabilities such as SSRF, injection, access control, JWT/OAuth, path traversal, cryptographic issues, and TOCTOU.