4+ years of experience in cybersecurity, application security, or vulnerability research
Hands-on experience with:
Vulnerability discovery (CVE exposure, bug bounty, red teaming, or CTFs)
Secure code review and production-grade patching
Deep understanding of:
Web security (authentication, sessions, OAuth, JWT vulnerabilities)
SSRF, injection attacks (command, template, environment), and access control issues
Cryptographic vulnerabilities (timing attacks, padding oracles, misuse patterns)
Filesystem vulnerabilities (TOCTOU, symlink attacks, path traversal)
Experience building or using security tools (SAST, fuzzing, IAST, etc.)
Proficiency in at least two of the following languages: Go, Python, Node.js, Rust