Application Security Engineer: Vulnerability Reproduction

Anyone AI Inc.; Argentina; A distancia; ARS 1.200.000 - 1.600.000; A tiempo parcial

Descripción de la vacante

Anyone AI Inc. seeks experienced Application Security Engineers and Vulnerability Researchers for a remote, part-time project. You will review CVE reproductions, assess remediation approaches, and verify that fixes address root causes while preserving legitimate functionality.

The role emphasizes hands-on testing, Docker-based labs, and rigorous vulnerability verification across CVSS/CWE classifications. This engagement suits security professionals who enjoy precise reproductions and clear

Formación

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE, CVSS, CWE, and common vulnerability classes.
• Experience identifying and remediating vulnerabilities such as: Command injection, SSRF, Access control issues, Security misconfigurations.
• Strong understanding of secure coding and vulnerability remediation.
• Experience validating whether security fixes address the root cause rather than only the immediate exploit.
• Proficiency with Docker and Docker Compose.
• Ability to provide clear, technically rigorous written feedback.

Responsabilidades

• Reviewing CVE reproduction environments for technical accuracy.
• Determining whether vulnerabilities faithfully reproduce the original attack vector and impact.
• Evaluating proposed security fixes and remediation strategies.
• Reviewing test suites that verify both: Normal application functionality remains intact; The original exploit no longer succeeds.
• Identifying incomplete fixes and alternative exploitation paths.
• Reviewing Docker environments for correct software versions, services, networking, and configuration.
• Detecting potential regressions or new vulnerabilities introduced by a fix.
• Providing recommendations for improving vulnerability reproductions, fixes, and verification logic.

Conocimientos

Hands-on security experience

Vulnerability assessment

Application security

Penetration testing

Herramientas

Docker

Docker Compose

Descripción del empleo

Anyone AI Inc. seeks experienced Application Security Engineers and Vulnerability Researchers for a remote, part-time project. You will review CVE reproductions, assess remediation approaches, and verify that fixes address root causes while preserving legitimate functionality.

The role emphasizes hands-on testing, Docker-based labs, and rigorous vulnerability verification across CVSS/CWE classifications. This engagement suits security professionals who enjoy precise reproductions and clear