CVE Security QA Engineer: Lab Repro & Remediation

Mercor; San Francisco (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Mercor seeks a security evaluation specialist to assess vulnerability reproduction and remediation activities in frontier AI lab environments. You will verify CVE fidelity, fix soundness, and verification logic while working with Docker-based lab setups that recreate exploitable conditions.

You will provide rubric-based feedback, ensuring task quality and completeness, and help shape rigorous evaluation criteria for secure model training and assessment.

Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE vulnerability taxonomy and severity frameworks (CVSS, CWE, CAPEC)
• Experience securing code across common vulnerability classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, privilege escalation)
• Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests)
• Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments

Responsibilities

• Evaluate quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks used to train models, with rubric-based feedback.

Skills

Application security

Penetration testing

Vulnerability research

Security test design

Tools

Docker

Docker Compose

Job description

Mercor seeks a security evaluation specialist to assess vulnerability reproduction and remediation activities in frontier AI lab environments. You will verify CVE fidelity, fix soundness, and verification logic while working with Docker-based lab setups that recreate exploitable conditions.

You will provide rubric-based feedback, ensuring task quality and completeness, and help shape rigorous evaluation criteria for secure model training and assessment.