App Security Expert – Remote (Worldwide)

RemoteJobsOne; Jacksonville (FL); Remote; USD 55,000 - 110,000; Part time

Job summary

RemoteJobsOne is seeking an App Security Expert for a fully remote, international contractor role. You will design and implement security-focused fixtures, create deterministic test cases, and generate hidden evaluation keys to advance AI-assisted security reviews.

Strong OSWE background and AI-SAST knowledge are highly valued. The role emphasizes precise written work, collaboration, and delivering actionable security recommendations in a remote setting.

Qualifications

• 5+ years in application security, secure software development, or CyberSWE roles.
• Strong understanding of OSWE, LLM security, and AI-powered static analysis.
• Proven track record in security architecture for traditional and agent-based apps.
• Experience with synthetic security fixtures and deterministic testing approaches is highly desirable.

Responsibilities

• Design and implement small, purpose-built fixtures with embedded Security vulnerabilities or secure solutions.
• Develop deterministic test cases and security-context manifests for robust assessment.
• Create detailed hidden answer keys for evaluating vulnerable vs. secure code.
• Evaluate pipelines to ensure synthetic tasks are realistic for AppSec assessment.
• Document technical insights and methodologies with clear feedback.

Skills

AppSec expertise

OSWE

LLM security

AI-SAST

Security architecture

Documentation

Deterministic testing

Tools

AI-SAST tools

Job description

This is a fully remote position, open to candidates based in 55 countries, including United States, United Kingdom, Canada, Germany, India, France, Netherlands, Singapore.

Pay: $40–$80/hr

Role Title: App Security Expert

Role Type: Contractor

Location: Remote

We are engaging App Security Experts to contribute to a customer’s dynamic project focused on real-world application security.

In this role, you'll apply your expertise to help train next-generation AI systems.

Your work will shape how models learn, reason, and perform through high-quality, real-world input.

No prior experience in AI is required — your domain knowledge is what matters.

Scope of Work

• Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.
• Develop deterministic test cases and security-context manifests to robustly assess application security posture.
• Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.
• Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.
• Document technical insights and methodologies, ensuring clarity in written feedback and communication.
• Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.
• Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.

Preferred Qualifications

• Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles.
• Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.
• Proven track record designing or evaluating security architecture for traditional and agent-based applications.
• Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities.
• Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback.
• Experience with synthetic security fixtures and deterministic testing approaches is highly desirable.
• Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context.