Cybersecurity Expert

oak tree software solutions; United States; Remote; USD 29,000 - 35,000; Part time

Job summary

Oak Tree Software Solutions seeks an experienced Cybersecurity Expert to perform penetration testing, app security review, and vulnerability research. You will identify vulnerabilities in applications and source code, design multi-CWE scenarios, and build automated testing tasks to evaluate security for advanced AI models.

The role requires hands-on offensive and defensive security, including code review, remediation, and patching, with remote work options and a 3-month engagement.

Qualifications

• 4+ years of cybersecurity, application security or vulnerability research experience.
• Hands-on experience in penetration testing and bug bounty programs.
• Knowledge of OWASP Top 10, CWE and CVE.
• Familiarity with SSRF, SQLi, Command Injection, XSS, JWT, OAuth, IDOR and Path Traversal.
• Proficient in at least one language: Python, Go, Node.js or Rust.
• Experience with SAST/DAST/IAST or fuzzing.
• Docker, Linux and automated testing frameworks like Pytest.

Responsibilities

• Perform penetration testing and identify vulnerabilities in applications and source code.
• Design applications with multiple security vulnerabilities (multi-CWE).
• Develop multi-stage attack chains using different vulnerability types.
• Create security test cases and automated exploit verification checks.
• Build reproducible testing environments using Docker.
• Conduct secure code reviews and suggest remediation.
• Analyze AI-generated security responses and identify weaknesses.
• Work with real-world CVEs and synthetic vulnerability scenarios.

Skills

Penetration testing

Bug bounty

Red teaming

CTFs

OWASP Top 10

CWE

CVE

SSRF

SQL Injection

Command Injection

XSS

JWT

OAuth

IDOR

Path Traversal

Python

Go

Node.js

Rust

Secure Code Review

SAST

DAST

IAST

Fuzzing

Docker

Linux

Pytest

Code analysis

Tools

Docker

Pytest

Job description

Cybersecurity Expert – Penetration Testing & Application Security

• Experience: 4+ Years Contract
• Duration: 3 Months Payout: ₹2.73 LPM
• Work Mode: Remote Availability: 8 hours/day with 4 hours of PST overlap Engagement: Short-Term Contract

Job Overview

We are looking for experienced Cybersecurity Experts with strong hands-on experience in penetration testing, application security, and vulnerability research.

The role involves identifying application vulnerabilities, analyzing source code, developing realistic attack scenarios, and building security evaluation tasks to test advanced AI models.

Candidates should have experience in both offensive security (finding and exploiting vulnerabilities) and defensive security (code review, remediation, and security patching).

Key Responsibilities

• Perform penetration testing and identify vulnerabilities in applications and source code.
• Design applications containing multiple security vulnerabilities (multi-CWE).
• Develop multi-stage attack chains combining different vulnerability types.
• Create security test cases and automated exploit verification checks.
• Build reproducible testing environments using Docker.
• Conduct secure code reviews and recommend vulnerability fixes.
• Analyze AI-generated security responses and identify weaknesses.
• Work with real-world CVEs and synthetic vulnerability scenarios.

Required Skills

• 4+ years of experience in Cybersecurity, Application Security, or Vulnerability Research.
• Strong hands-on experience in Penetration Testing, Bug Bounty, Red Teaming, or CTFs.
• Strong understanding of OWASP Top 10, CWE, and CVE.
• Knowledge of SSRF, SQL Injection, Command Injection, XSS, JWT, OAuth, IDOR, and Path Traversal.
• Proficiency in at least one programming language: Python, Go, Node.js, or Rust.
• Experience with Secure Code Review, SAST, DAST, IAST, or Fuzzing.
• Familiarity with Docker, Linux, and automated testing frameworks such as Pytest.
• Ability to analyze complex or obfuscated source code.
• Strong analytical and problem-solving skills.

Preferred Candidate Profile

Candidates with practical experience in

• Web and API penetration testing.
• Vulnerability discovery and exploit development.
• Multi-stage attack scenarios.
• Security automation and vulnerability assessment.
• Application security testing and remediation.

[e-mail]

Work Location: Remote