Remote Application Security & Vulnerability Researcher

Anyone AI Inc.; Lisboa; Remote; EUR 83,000 - 124,000; Part time

Job summary

Anyone AI Inc. is seeking experienced Application Security Engineers and Vulnerability Researchers for a remote, part‑time, project‑based engagement focused on reviewing real‑world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.

You will apply hands‑on skills in penetration testing, vulnerability research, and application security to verify vulnerability reproduction accuracy, root cause fixes, and robust security tests that demonstrate

Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE, CVSS, CWE, and common vulnerability classes.
• Experience identifying and remediating vulnerabilities such as SQL injection, command injection, SSRF, deserialization, buffer overflows, privilege escalation, access control issues, and security misconfigurations.
• Strong understanding of secure coding and vulnerability remediation.
• Experience reviewing or developing exploit proof-of-concept code.
• Experience validating whether security fixes address the root cause rather than only the immediate exploit.
• Proficiency with Docker and Docker Compose.
• Ability to provide clear, technically rigorous written feedback.

Responsibilities

• Review CVE reproduction environments for technical accuracy.
• Determine whether vulnerabilities faithfully reproduce the original attack vector and impact.
• Evaluate proposed security fixes and remediation strategies.
• Review test suites that verify both normal application functionality and that the original exploit no longer succeeds.
• Identify incomplete fixes and alternative exploitation paths.
• Review Docker environments for correct software versions, services, networking, and configuration.
• Detect potential regressions or new vulnerabilities introduced by a fix.
• Provide recommendations for improving vulnerability reproductions, fixes, and verification logic.

Skills

Application security

Penetration testing

Vulnerability research

Education

OSCP

GPEN

GWAPT

Tools

Docker

Docker Compose

Python

requests

curl

pwntools

Custom exploit harnesses

Job description

Anyone AI Inc. is seeking experienced Application Security Engineers and Vulnerability Researchers for a remote, part‑time, project‑based engagement focused on reviewing real‑world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.

You will apply hands‑on skills in penetration testing, vulnerability research, and application security to verify vulnerability reproduction accuracy, root cause fixes, and robust security tests that demonstrate