CVE Vulnerability Reproduction & Security QA Expert

Dorado; Northern (KY); Hybrid; USD 100,000 - 140,000; Full time

Job summary

Dorado is seeking an experienced security researcher to evaluate vulnerability reproduction and remediation tasks used to train frontier AI lab models. You will assess CVE fidelity, fix soundness, and the rigor of verification logic within Docker-based lab environments.

The role focuses on ensuring reproducible lab conditions for exploitable scenarios, with emphasis on secure coding practices and vulnerability verification across common classes.

Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE vulnerability taxonomy and severity frameworks (CVSS, CWE, CAPEC).
• Expertise in secure coding and remediation across common vulnerability classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, privilege escalation).
• Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests).
• Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments.

Responsibilities

• Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks used to train and evaluate frontier AI lab models.
• Assess whether CVE reproductions are faithful and fixes are sound.
• Review verification logic for rigor and reproducibility in lab environments.

Skills

Application security

Penetration testing

Vulnerability research

Secure coding

CVE taxonomy

Docker

Docker Compose

Verification logic

DevSecOps

Tools

Docker

Docker Compose

SAST/DAST tooling

Job description

Dorado is seeking an experienced security researcher to evaluate vulnerability reproduction and remediation tasks used to train frontier AI lab models. You will assess CVE fidelity, fix soundness, and the rigor of verification logic within Docker-based lab environments.

The role focuses on ensuring reproducible lab conditions for exploitable scenarios, with emphasis on secure coding practices and vulnerability verification across common classes.