App Security Expert

Remotebridge; United States; À distance; USD 83 000 - 165 000; Temps partiel

Résumé du poste

Remotebridge is seeking an App Security Expert for remote contract work. The role focuses on designing secure and vulnerable application fixtures to stress-test security postures, with emphasis on OWASP LLM risks and deterministic evaluation.

You will develop test cases, create evaluation keys, and document methodologies while collaborating with peers across the security team to improve the evaluation pipeline.

Qualifications

• Extensive experience in application security or CyberSWE roles.
• Strong knowledge of OSWE, LLM security and AI-powered analysis.
• Proven record designing or evaluating security architectures.

Responsabilités

• Design and implement fixtures with embedded security vulnerabilities or secure solutions.
• Develop deterministic test cases and security-context manifests.
• Create hidden answer keys to evaluate secure vs vulnerable code.
• Evaluate and iterate pipeline methodologies for realistic tasks.
• Document technical insights with clear written feedback.
• Collaborate through precise written and verbal communication.
• Contribute to continuous improvement of the evaluation pipeline.

Connaissances

Application security

Secure SDLC

OSWE

LLM security

AI-SAST

AppSec best practices

Security architecture

Deterministic testing

Technical documentation

Description du poste

Role Title: App Security Expert

Role Type: Contractor

Location: Remote

Scope of Work

• Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.
• Develop deterministic test cases and security-context manifests to robustly assess application security posture.
• Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.
• Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.
• Document technical insights and methodologies, ensuring clarity in written feedback and communication.
• Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.
• Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.

Preferred Qualifications

• Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles.
• Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.
• Proven track record designing or evaluating security architecture for traditional and agent-based applications.
• Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities.
• Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback.
• Experience with synthetic security fixtures and deterministic testing approaches is highly desirable.
• Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context.