CVE Vulnerability & AI Evaluation Specialist

HumanitApp; Northern (KY); Hybrid; USD 96,000 - 124,000; Full time

Job summary

HumanitApp is seeking an experienced security evaluation researcher to assess vulnerability reproductions, remediation quality, and verification logic in AI-lab environments. You will review CVE fidelity, fixes, and docker-based labs to ensure exploitable conditions are accurately represented.

The role requires hands-on security experience, knowledge of CVE taxonomy, and ability to deliver rubric-based feedback.

Qualifications

• 3+ years in application security, pentesting or vulnerability research.
• Strong understanding of CVE taxonomy and severity frameworks (CVSS, CWE, CAPEC).
• Secure coding and remediation across common vulnerability classes (SQLi, RCE, buffer overflows, deserialization, SSRF).
• Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests).
• Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments.

Responsibilities

• Evaluate CVE reproductions for fidelity, fixes, and verification rigor.
• Assess Docker-based labs reproducing exploitable conditions.
• Provide rubric-based written feedback on vulnerability reproduction and remediation tasks.

Skills

Application security

Penetration testing

Vulnerability research

CVE taxonomy and CVSS

Verification logic design

2-part verification strategy

Tools

Docker

Docker Compose

Job description

HumanitApp is seeking an experienced security evaluation researcher to assess vulnerability reproductions, remediation quality, and verification logic in AI-lab environments. You will review CVE fidelity, fixes, and docker-based labs to ensure exploitable conditions are accurately represented.

The role requires hands-on security experience, knowledge of CVE taxonomy, and ability to deliver rubric-based feedback.