Remote Application Security Engineer & CVE Research

Anyone AI Inc.; Madrid; Remote; EUR 40,000 - 70,000; Part time

Benefits offered by this job

Remote work

Part-time, project-based consulting

Job summary

Anyone AI is recruiting experienced Application Security Engineers and Vulnerability Researchers for a specialized project focused on reviewing real-world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.

We’re looking for security professionals with hands-on experience in penetration testing, vulnerability research, or application security who can determine whether vulnerabilities are reproduced accurately, fixes address the root cause,

Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE, CVSS, CWE, and common vulnerability classes.
• Experience identifying and remediating vulnerabilities such as SQL injection, command injection, SSRF, deserialization, buffer overflows, privilege escalation, access control issues, security misconfigurations.

Responsibilities

• Review CVE reproduction environments for technical accuracy and fidelity.
• Evaluate proposed fixes to ensure root cause is addressed and not just the exploit.
• Support security testing and verification; ensure normal app functionality remains intact.
• Review Docker environments for correct software versions, services, networking, and configuration.
• Provide technically rigorous written feedback and recommendations for improving reproductions and verification logic.

Skills

Application security

Penetration testing

Vulnerability research

Exploit development

Secure coding

Tools

Docker

Docker Compose

Python

pwntools

requests

curl

Job description

Anyone AI is recruiting experienced Application Security Engineers and Vulnerability Researchers for a specialized project focused on reviewing real-world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.

We’re looking for security professionals with hands-on experience in penetration testing, vulnerability research, or application security who can determine whether vulnerabilities are reproduced accurately, fixes address the root cause,