Application Security Engineer – CVE & Vulnerability Research
Anyone AI · Remote · Argentina - Fully Remote · Uruguay · Chile · Ecuador - Fully Remote · Portugal · Mexico - Fully Remote · Colombia - Fully Remote · Spain · Brazil ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Part-time remote
- CVE research focus
- Docker expertise
- 3+ years experience
Join Anyone AI as an Application Security Engineer to evaluate real-world software vulnerabilities. You will assess the accuracy of CVE reproductions, verify that remediation strategies address root causes, and ensure security tests effectively mitigate exploits without breaking functionality.
What you'll do
- Review CVE reproduction environments for technical accuracy and fidelity
- Determine if vulnerabilities faithfully recreate original attack vectors
- Evaluate proposed security fixes and remediation strategies
- Verify test suites ensure normal functionality remains intact
- Identify incomplete fixes and alternative exploitation paths
- Check Docker environments for correct versions and configurations
- Detect potential regressions or new vulnerabilities from fixes
What you'll need
- 3+ years in application security, pentesting, or vulnerability research
- Strong knowledge of CVE, CVSS, CWE, and vulnerability classes
- Experience with SQL injection, SSRF, and deserialization flaws
- Proficiency in secure coding and vulnerability remediation
- Experience reviewing or developing exploit proof-of-concepts
- Ability to validate fixes address root causes, not just symptoms
- Proficient with Docker and Docker Compose
- Capable of providing clear, technically rigorous written feedback
Nice to have
- OSCP, GPEN, GWAPT, or equivalent security certification
- Experience with responsible vulnerability disclosure
- Skill in maintaining exploit proof-of-concept code
- Ability to write automated security tests in Python
- Familiarity with SAST, DAST, and CI/CD security tooling
- Experience with AI evaluation or RLHF projects
Stack
- Docker
- Docker Compose
- Python
- requests
- curl
- pwntools
How you'll work
- Fully remote position
- Part-time engagement
- Project-based consulting role