Ethical Hacker / Cybersecurity Specialist

About the role

We are seeking an Ethical Hacker / Cybersecurity Specialist to join Nepal AI Labs. In this full-time remote position you will think like an attacker and work with our engineering teams to build more secure AI-powered products from the ground up.

Key responsibilities

• Conduct authorized penetration testing of web, API, mobile applications and infrastructure.
• Identify, exploit and document security vulnerabilities, providing clear remediation guidance.
• Perform vulnerability assessments, security audits and threat-modeling across products and cloud environments.
• Test AI/ML applications for risks such as prompt injection, data leakage and model-related vulnerabilities.
• Collaborate with developers to validate fixes and improve security practices.
• Stay current on emerging threats, CVEs and cybersecurity research, and help define internal testing methodologies.

Required profile

• Strong understanding of cybersecurity principles and offensive security methodologies.
• Hands-on experience with penetration testing and vulnerability assessment.
• Good knowledge of OWASP Top 10, API security, authentication and authorization mechanisms.
• Ability to communicate technical findings clearly to both technical and non-technical audiences.

Required skills

• Penetration testing, vulnerability assessment
• OWASP Top 10, API security
• Burp Suite, Nmap, Metasploit, Wireshark, Kali Linux
• Linux, networking, HTTP/HTTPS, DNS, TCP/IP, databases
• Source-code security analysis
• Cloud security (preferred)
• AI/ML security or LLM security (highly desirable)