AI Cybersecurity & Vulnerability Tester

About SecRecon (app.secrecon.dev): SecRecon is a AI-driven Attack Surface Management platform built to eliminate false-positive noise in web application security testing. We combine active fuzzing, dual-session IDOR logic testing, out-of-band (OAST) callback correlation, and Model Context Protocol (MCP) workflows to deliver 100% verified, zero-false-positive exploit proofs. Role Overview: We are seeking a motivated, hands-on Junior AI Security Researcher / Vulnerability Tester in India for a part-time internship/contract role (5–8 hours/week). You will work directly with our automated platform—running scans against authorized web applications and vulnerable test labs (OWASP Juice Shop, WebGoat, internal honeypots), analyzing AI triage outputs, and verifying proof-of-concept payloads. What You’ll Do: • Execute Scans: Run SecRecon scans against designated test targets, staging environments, and vulnerable lab applications. • Validate Exploits: Review AI-generated triage reports to verify findings (IDOR, SSRF, Auth Bypasses, XSS) and confirm cURL reproduction steps. • Filter False-Positive Noise: Compare SecRecon’s scan outputs against standard tools (Burp Suite, OWASP ZAP, Nuclei) to benchmark accuracy. • Document Findings: Write clear, concise vulnerability reproduction steps and cURL PoC scripts for validated findings. What We’re Looking For: • Core Fundamentals: Good understanding of web security concepts (OWASP Top 10, HTTP requests/responses, headers, cookies, authentication). • Hands-on Practice: Active experience on TryHackMe, HackTheBox, PortSwigger Web Security Academy, or CTFs. • Basic Tool Familiarity: Comfortable using cURL, Burp Suite / OWASP ZAP, Python, and command-line tools. • High Attention to Detail: Eagerness to learn AI-driven security workflows and verify real exploit proofs. Perks & Benefits: • Performance Bonuses: Extra $5 – $10 bonus per unique, verified zero-false-positive finding confirmed on authorized target labs. • Official Experience: Upwork feedback, LinkedIn recommendation, and Internship Certificate upon completion. • Flexible Hours: 5–8 hours per week (works easily alongside college or other projects).