Cyber Security Specialist

Codefeast; India; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Codefeast is seeking experienced Cybersecurity Experts to design and execute realistic security evaluation tasks for frontier AI models. You will identify vulnerabilities, craft attack scenarios, review insecure code, and build deterministic testing environments.

Responsibilities include designing multi-CWE bases, building multi-stage attack chains, and writing test cases to verify exploits. Proficiency in Python, Go, Node.js, or Rust is desired.

Qualifications

• 4+ years in Cybersecurity, AppSec, Penetration Testing, or Vulnerability Research.
• Strong experience with offensive and defensive security.
• Familiarity with SSRF, injection, access control, JWT/OAuth, path traversal, cryptographic issues, and TOCTOU.

Responsibilities

• Design multi-vulnerability / multi-CWE codebases.
• Build realistic multi-stage attack chains.
• Create Dockerized evaluation environments and automated verifiers.
• Write exploit checks and security test cases.

Skills

Cybersecurity

AppSec

Penetration Testing

Vulnerability Research

Tools

Python

Go

Node.js

Rust

Job description

Domain: Cybersecurity | Penetration Testing | AppSec | AI Evaluation

Role Overview

We are looking for experienced Cybersecurity Experts to build realistic security evaluation tasks for frontier AI models. The role involves identifying vulnerabilities, creating attack scenarios, reviewing insecure code, and building deterministic security testing environments.

Key Responsibilities

• Design multi-vulnerability / multi-CWE codebases.
• Build realistic multi-stage attack chains.
• Create Dockerized evaluation environments and automated verifiers.
• Write exploit checks and security test cases.

Key Requirements

• 4+ years in Cybersecurity, AppSec, Penetration Testing, or Vulnerability Research.
• Strong experience with offensive and defensive security.
• Proficiency in Python, Go, Node.js, or Rust.
• Familiarity with vulnerabilities such as SSRF, injection, access control, JWT/OAuth, path traversal, cryptographic issues, and TOCTOU.