AI App Security Evaluator — Vulnerability Reproduction & Labs

Mercor; New York (NY); Remote; USD 110,000 - 160,000; Full time

Job summary

Mercor seeks a security-focused researcher to evaluate vulnerability reproduction and remediation tasks used to train frontier AI models. You will ensure CVE reproductions are faithful and fixes are sound, with rigorous verification logic across tests.

You will review Docker-based lab environments and provide rubric-based written feedback, helping to maintain high standards for exploit reproduction fidelity and remediation quality.

Qualifications

• 3+ years of hands-on security work and vulnerability research.
• Strong knowledge of CVE taxonomy and severity frameworks (CVSS/CWE/CAPEC).
• Experience validating remediation and verification logic for security tasks.

Responsibilities

• Evaluate vulnerability reproduction and remediation tasks used to train and evaluate frontier AI models.
• Assess fidelity of CVE reproductions and soundness of fixes.
• Provide rubric-based written feedback and ensure rigorous verification logic.
• Analyze Docker-based lab environments to faithfully recreate exploitable conditions.

Skills

Application security

Penetration testing

Vulnerability research

Secure coding

Verification logic design

Tools

Docker

Docker Compose

Job description

Mercor seeks a security-focused researcher to evaluate vulnerability reproduction and remediation tasks used to train frontier AI models. You will ensure CVE reproductions are faithful and fixes are sound, with rigorous verification logic across tests.

You will review Docker-based lab environments and provide rubric-based written feedback, helping to maintain high standards for exploit reproduction fidelity and remediation quality.