Remote App Security Engineer & CVE Research

Anyone AI Inc.; Argentina; Remote; ARS 91,242,000 - 182,485,000; Part time

Job summary

Anyone AI Inc. is seeking experienced security professionals to review real-world vulnerabilities, CVE reproductions, and remediation approaches. The role emphasizes accurate reproduction, root-cause fixes, and verification environments across Docker-based labs.

Ideal candidates have hands-on security experience, proficiency with CVE/CVSS/CWE, and a track record of validating fixes and bootstrap tests. Remote, part-time consulting engagement with focus on application security and vulnerability

Qualifications

• Minimum 3+ years of hands-on experience in application security, pen testing, or vulnerability research.
• Strong understanding of CVE, CVSS, CWE, and common vulnerability classes.
• Experience reviewing or developing exploit proof-of-concept code and remediation strategies.

Responsibilities

• Review CVE reproduction environments for technical accuracy.
• Assess whether vulnerabilities reproduce the original attack vector and impact.
• Evaluate proposed fixes and remediation strategies for root-cause addressing.
• Review test suites to ensure normal functionality remains and exploits no longer succeed.
• Identify incomplete fixes and alternative exploitation paths.
• Review Docker environments for correct software versions, services, networking, and configuration.
• Provide recommendations to improve reproductions, fixes, and verification logic.

Skills

Application security

Vulnerability research

Penetration testing

Tools

Docker

Docker Compose

Job description

Anyone AI Inc. is seeking experienced security professionals to review real-world vulnerabilities, CVE reproductions, and remediation approaches. The role emphasizes accurate reproduction, root-cause fixes, and verification environments across Docker-based labs.

Ideal candidates have hands-on security experience, proficiency with CVE/CVSS/CWE, and a track record of validating fixes and bootstrap tests. Remote, part-time consulting engagement with focus on application security and vulnerability