SecOps Engineer

Micro1; India; Remote; INR 6,468,000 - 10,348,000; Part time

Job summary

Cashback24x7 is seeking a SecOps Engineer (Contractor) to strengthen security across software delivery and production environments. This remote role emphasizes secure code reviews and proactive vulnerability remediation, with a focus on OWASP Top 10 and modern threat classes.

You will develop automation to streamline detection, perform targeted testing, and guide teams on secure coding practices, ensuring clear, actionable security outcomes for enterprise applications.

Qualifications

• 5+ years of hands-on experience in software engineering or security operations with a focus on application-layer security.
• Proficiency in Python, GoLang, Rust, JavaScript, or TypeScript.
• Demonstrated expertise in secure code review and professional penetration testing.
• Strong familiarity with OWASP Top 10, CWE, and modern vulnerability classes.
• Proven ability to detect, prioritize, and remediate vulnerabilities in production applications.
• Exceptional written and verbal communication skills, with a strong emphasis on clarity and detail.
• Fluent English and availability for at least 6+ hours overlap with Eastern Time.

Responsibilities

• Perform expert-level secure code reviews with a focus on OWASP Top 10 and CWE vulnerability classes.
• Identify, triage, and remediate application-layer vulnerabilities.
• Develop and maintain security automation tools to streamline vulnerability detection and remediation.
• Conduct and document penetration tests, collaborating to drive remediation initiatives.
• Advise development teams on secure coding practices throughout the software lifecycle.
• Stay informed of emerging threats and apply best practices in customer environments.
• Communicate findings clearly through detailed reports and briefings.

Skills

Secure code review

OWASP Top 10

Penetration testing

Python

GoLang

JavaScript/TypeScript

English communication

Tools

Vulnerability management platforms

Job description

Job Title

SecOps Engineer

Job Type

Contractor

Location

Remote

Job Summary

In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.

Key Responsibilities

• Perform expert-level secure code reviews with a focus on OWASP Top 10 and CWE vulnerability classes.
• Identify, triage, and remediate application-layer vulnerabilities, including broken access control, IDOR, SQL injection, command injection, and deserialization flaws.
• Develop and maintain security automation tools using Python, GoLang, or JavaScript/TypeScript to streamline vulnerability detection and remediation processes.
• Conduct and document penetration tests, collaborating cross-functionally to drive remediation initiatives.
• Advise development teams on secure coding practices, bringing a proactive security mindset into the software lifecycle.
• Stay informed of emerging threats and incorporate best practices within the customer's environments.
• Communicate effectively through detailed written reports and verbal briefings, ensuring security findings are clearly understood and actionable.

Required Skills and Qualifications

• 5+ years of hands-on experience in software engineering or security operations with a focus on application-layer security.
• Proficiency in Python, GoLang, Rust, JavaScript, or TypeScript.
• Demonstrated expertise in secure code review and professional penetration testing.
• Strong familiarity with OWASP Top 10, CWE, and modern vulnerability classes.
• Proven ability to detect, prioritize, and remediate vulnerabilities in production applications.
• Exceptional written and verbal communication skills, with a strong emphasis on clarity and detail.
• Fluent English and availability for at least 6+ hours overlap with Eastern Time.

Preferred Qualifications

• Experience deploying, integrating, or maintaining vulnerability management platforms.
• Certifications such as OSCP, GIAC, or equivalent are advantageous.
• Background in cloud or container security practices.

NOTE :

Please note that for this role, you’ll be required to complete a separate interview specifically designed for this position. The interview helps us evaluate relevance and practical fit for the workflow and task structure involved in this project. We’ll only be moving forward with candidates who complete this interview successfully.