Remote Application Security Research Engineer (Part-Time)

Hidden Jobs; United States; Remote; USD 96,000 - 152,000; Part time

Benefits offered by this job

Fully remote

Part-time project-based engagement

Job summary

anyone-ai in the United States is seeking a part-time, remote, project-based security consultant to review real-world vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.

You will evaluate fixes, review test suites to ensure original exploits no longer succeed, audit Docker-based environments, and deliver clear, technically rigorous recommendations based on 3+ years in application security and vulnerability research.

Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE, CVSS, CWE, and common vulnerability classes.
• Experience reviewing or developing exploit proof-of-concepts.
• Proficiency with Docker and Docker Compose for building vulnerable environments.
• Ability to produce clear, technically rigorous written feedback.

Responsibilities

• Review CVE reproduction environments for technical accuracy and faithful reproduction of the original attack vector and impact.
• Evaluate proposed security fixes and remediation strategies for root cause alignment.
• Review test suites to ensure application functionality remains intact and exploits are mitigated.
• Identify incomplete fixes and alternative exploitation paths, including potential regressions.
• Audit Docker-based environments for correct software versions, services, networking, and configuration.
• Provide clear, technically rigorous written recommendations for improvements.

Skills

Application security

Penetration testing

Vulnerability research

Tools

Docker

Docker Compose

Python

Requests

Curl

Pwntools

Job description

anyone-ai in the United States is seeking a part-time, remote, project-based security consultant to review real-world vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.

You will evaluate fixes, review test suites to ensure original exploits no longer succeed, audit Docker-based environments, and deliver clear, technically rigorous recommendations based on 3+ years in application security and vulnerability research.