Remote Penetration Tester & App Security Expert

oak tree software solutions; United States; Remoto; USD 29.000 - 35.000; Part-time

Descrizione del lavoro

Oak Tree Software Solutions seeks an experienced Cybersecurity Expert to perform penetration testing, app security review, and vulnerability research. You will identify vulnerabilities in applications and source code, design multi-CWE scenarios, and build automated testing tasks to evaluate security for advanced AI models.

The role requires hands-on offensive and defensive security, including code review, remediation, and patching, with remote work options and a 3-month engagement.

Competenze

• 4+ years of cybersecurity, application security or vulnerability research experience.
• Hands-on experience in penetration testing and bug bounty programs.
• Knowledge of OWASP Top 10, CWE and CVE.
• Familiarity with SSRF, SQLi, Command Injection, XSS, JWT, OAuth, IDOR and Path Traversal.
• Proficient in at least one language: Python, Go, Node.js or Rust.
• Experience with SAST/DAST/IAST or fuzzing.
• Docker, Linux and automated testing frameworks like Pytest.

Mansioni

• Perform penetration testing and identify vulnerabilities in applications and source code.
• Design applications with multiple security vulnerabilities (multi-CWE).
• Develop multi-stage attack chains using different vulnerability types.
• Create security test cases and automated exploit verification checks.
• Build reproducible testing environments using Docker.
• Conduct secure code reviews and suggest remediation.
• Analyze AI-generated security responses and identify weaknesses.
• Work with real-world CVEs and synthetic vulnerability scenarios.

Conoscenze

Penetration testing

Bug bounty

Red teaming

CTFs

OWASP Top 10

CWE

CVE

SSRF

SQL Injection

Command Injection

XSS

JWT

OAuth

IDOR

Path Traversal

Python

Go

Node.js

Rust

Secure Code Review

SAST

DAST

IAST

Fuzzing

Docker

Linux

Pytest

Code analysis

Strumenti

Docker

Pytest

Descrizione del lavoro

Oak Tree Software Solutions seeks an experienced Cybersecurity Expert to perform penetration testing, app security review, and vulnerability research. You will identify vulnerabilities in applications and source code, design multi-CWE scenarios, and build automated testing tasks to evaluate security for advanced AI models.

The role requires hands-on offensive and defensive security, including code review, remediation, and patching, with remote work options and a 3-month engagement.