GenAI Security Evaluator - Part-Time, Remote

OpenTrain AI, Inc.; United States; Remote; USD 28,000 - 103,000; Part time

Benefits offered by this job

Remote work

Contract, part-time

Job summary

OpenTrain AI, Inc. is seeking a part-time, 100% remote contractor to build and test vulnerable and patched GenAI applications, tracing data and action flows, and evaluating authorization, prompt injection, and tool abuse.

The role requires at least three years in application security, secure code review, or vulnerability research, with strong English technical communication. Expect 20+ hours per week and work across global timelines.

Qualifications

• At least three years in application or product security, secure code review, penetration testing, or vulnerability research.
• Experience documenting security findings with precise code references.
• Experience writing exploit and reproduction tests to validate patches.

Responsibilities

• Define authorization contexts for actors, trust boundaries, tenants, permitted data and actions, purposes and recipients.
• Document findings with exact code spans, traps, control status and remediation recommendations.
• Write exploit and reproduction tests to demonstrate vulnerable behavior and verify patches.
• Evaluate issues such as sensitive information disclosure, prompt injection, tool abuse, and authorization flaws that scanners may miss.

Skills

Application security

Penetration testing

Vulnerability research

Code review

OWASP Top 10

Education

SWE/CSE degree or equivalent

OSCP or similar certification

Tools

CodeQL

Semgrep

SARIF

OpenTelemetry

Docker

Git

Job description

OpenTrain AI, Inc. is seeking a part-time, 100% remote contractor to build and test vulnerable and patched GenAI applications, tracing data and action flows, and evaluating authorization, prompt injection, and tool abuse.

The role requires at least three years in application security, secure code review, or vulnerability research, with strong English technical communication. Expect 20+ hours per week and work across global timelines.