CVE Reproduction & Remediation Specialist

DigiNo; Northern (KY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

DigiNo is seeking an experienced security professional to evaluate vulnerability reproduction and remediation tasks used to train frontier AI models. You will assess CVE fidelity, fix soundness, and verification rigor across Docker-based lab environments.

Responsibilities include delivering rubric-based feedback and ensuring reproducible conditions in multi-container environments, with a focus on SQL injection, deserialization, SSRF, and related vulnerabilities.

Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Deep knowledge of CVE taxonomy and severity frameworks (CVSS, CWE, CAPEC).
• Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests).
• Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments.

Responsibilities

• Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks used to train and evaluate a frontier AI lab's models.
• Provide rubric-based written feedback.
• Assess whether CVE reproductions are faithful and fixes are sound.
• Verify that Docker-based lab environments accurately recreate exploitable conditions.

Skills

Hands-on security experience

CVE taxonomy & severity frameworks

Secure coding & remediation for common

Verification logic design

Tools

Docker

Docker Compose

Job description

DigiNo is seeking an experienced security professional to evaluate vulnerability reproduction and remediation tasks used to train frontier AI models. You will assess CVE fidelity, fix soundness, and verification rigor across Docker-based lab environments.

Responsibilities include delivering rubric-based feedback and ensuring reproducible conditions in multi-container environments, with a focus on SQL injection, deserialization, SSRF, and related vulnerabilities.