App Security Expert

Micro1; India; A distancia; INR 7.761.000 - 15.522.000; A tiempo parcial

Descripción de la vacante

Cashback24x7 is looking for an App Security Expert (Contractor) to design and implement security fixtures, address OWASP LLM risks, and contribute to real-world application security assessments on a remote project. 5+ years in app security preferred.

You'll develop deterministic test cases and security-context manifests, create detailed hidden answer keys, evaluate pipelines, document insights, and communicate findings clearly with the team across time zones.

Formación

• 5+ years of experience in application security or CyberSWE roles.
• Strong knowledge of OSWE, LLM security, and AI-powered static analysis.
• Proven track record designing or evaluating security architecture for apps.
• Excellent written and verbal communication with precise technical documentation.
• Experience with synthetic security fixtures and deterministic testing is desirable.

Responsabilidades

• Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions.
• Develop deterministic test cases and security-context manifests to robustly assess application security posture.
• Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.
• Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.
• Document technical insights and methodologies, ensuring clarity in written feedback and communication.
• Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.
• Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.

Conocimientos

OSWE

LLM security

AI-SAST

AppSec best practices

Security architecture

Technical writing

Descripción del empleo

Job Description

Role Title: App Security Expert

Role Type: Contractor

Location: Remote

micro1 is engaging App Security Experts to contribute to a customer’s dynamic project focused on real-world application security. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.

Scope of Work

• Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.
• Develop deterministic test cases and security-context manifests to robustly assess application security posture.
• Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.
• Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.
• Document technical insights and methodologies, ensuring clarity in written feedback and communication.
• Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.
• Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.

Preferred Qualifications

• Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles.
• Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.
• Proven track record designing or evaluating security architecture for traditional and agent-based applications.
• Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities.
• Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback.
• Experience with synthetic security fixtures and deterministic testing approaches is highly desirable.
• Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context.