Job Title: Cybersecurity Expert / Penetration Tester
Location: Remote
Type: Full-Time/Part-time
About Band of Coders:
At Band of Coders, we build software solutions for startups and enterprises alike. Were a team of engineers, designers, and product strategists passionate about solving complex challenges through technology. As we continue to grow, were expanding our capabilities in cybersecurity to ensure that the solutions we deliver are secure, reliable, and resilient from day one.
Job Summary:
We are seeking a Cybersecurity Expert / Penetration Tester to join our growing team. This role involves identifying vulnerabilities in systems, applications, and infrastructure, and working collaboratively with development teams to remediate security risks. You will play a crucial role in enhancing our internal security practices and supporting client engagements where security is a top priority.
Key Responsibilities:
Conduct penetration tests on web and mobile applications, APIs, and cloud infrastructure (AWS, GCP, etc)
Perform security assessments and vulnerability scans using industry-standard tools
Analyze systems for misconfigurations, insecure code, and data exposure risks
Collaborate with developers to guide remediation efforts and implement secure coding practices
Design and improve internal security processes, including threat modeling and secure SDLC practices
Prepare technical reports and communicate findings and recommendations
Stay current with the latest security threats, tools, and best practices
Requirements:
3+ years of experience in cybersecurity, ethical hacking, or penetration testing
Proficiency with tools such as Burp Suite, OWASP ZAP, Metasploit, Nmap, Wireshark, and Kali Linux
Strong understanding of web and mobile application security (OWASP Top 10)
Experience testing cloud-based infrastructure (AWS, GCP, etc.)
Familiarity with programming/scripting languages like Python, JavaScript, Bash, or PowerShell
Knowledge of network protocols, authentication mechanisms, and common vulnerabilities
Experience working in DevOps and CI/CD pipelines is a plus
Strong written and verbal communication skills, including technical documentation and reporting
Knowledge of regulatory frameworks and compliance standards (e.g., SOC 2, GDPR, HIPAA)
Nice to Have:
Certifications such as OSCP, CEH, CISSP, or GWAPT
Experience working with API Gateways (e.g., Kong), microservices, and event-driven architectures
Experience working with real-time communication systems like Twilio or LiveKit