Remote App Security Engineer & CVE Research

Anyone AI Inc.; United States; Remote; CLP 80,719,000 - 114,352,000; Part time

Job summary

Anyone AI Inc. is seeking experienced Application Security Engineers and Vulnerability Researchers for a remote, part-time consulting engagement focused on real-world vulnerability analysis, CVE repro, remediation approaches, and exploit verification environments.

You will work on CVE reproduction, exploit proof-of-concepts, vulnerability remediation, and secure coding within Docker-based labs. The role emphasizes thorough evaluation of fixes and regression testing with rigorous written feedback.

Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE, CVSS, CWE, and common vulnerability classes.
• Experience identifying and remediating vulnerabilities such as SQL injection, command injection, SSRF, deserialization, buffer overflows, privilege escalation, access control issues, and security misconfigurations.
• Strong understanding of secure coding and vulnerability remediation.
• Experience reviewing or developing exploit proof-of-concepts and validating fixes.

Responsibilities

• Review CVE reproduction environments for technical accuracy.
• Determine whether vulnerabilities faithfully reproduce the original attack vector and impact.
• Evaluate proposed security fixes and remediation strategies.
• Review test suites to ensure normal functionality remains intact and original exploit no longer succeeds.
• Identify incomplete fixes and alternative exploitation paths.
• Review Docker environments for correct software versions, services, networking, and configuration.
• Detect potential regressions or new vulnerabilities introduced by a fix.
• Provide recommendations for improving reproductions, fixes, and verification logic.

Skills

3+ years experience

Vulnerability research

Application security

Exploit development

Docker & Docker Compose

Written technical feedback

Root-cause analysis

Education

OSCP/GPEN/GWAPT

Tools

Python

requests

curl

pwntools

Custom exploit harnesses

Docker

Docker Compose

Job description

Anyone AI Inc. is seeking experienced Application Security Engineers and Vulnerability Researchers for a remote, part-time consulting engagement focused on real-world vulnerability analysis, CVE repro, remediation approaches, and exploit verification environments.

You will work on CVE reproduction, exploit proof-of-concepts, vulnerability remediation, and secure coding within Docker-based labs. The role emphasizes thorough evaluation of fixes and regression testing with rigorous written feedback.