Remote CVE Vulnerability Expert for AI Security

Appsierra Group; United States; À distance; USD 146 000 - 187 000; Plein temps

Résumé du poste

Appsierra Group is seeking a CVE Vulnerability Expert to work remotely as an independent contractor in the United States. You will apply vulnerability research and application security expertise to evaluate CVE reproductions and remediation approaches for AI systems.

You will review Docker-based environments, provide rubric-based feedback, and help ensure security tasks across common vulnerability classes are accurate and practically relevant.

Qualifications

• 3+ years of hands-on professional experience in application security or vulnerability research.
• Strong understanding of CVE taxonomy and security severity frameworks (CVSS, CWE, CAPEC).
• Experience in secure coding and vulnerability remediation across common classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfig, privilege escalation).
• Experience designing or evaluating two-part verification logic (functionality and vulnerability testing).
• Proficiency with Docker and Docker Compose for multi-container reproduction environments.
• Excellent written communication and ability to provide clear, structured technical feedback.

Responsabilités

• Evaluate vulnerability-reproduction tasks for quality, fidelity, completeness, and technical accuracy.
• Assess CVE reproductions for fidelity to underlying vulnerability and exploitable conditions.
• Review remediation approaches to ensure fixes address root cause.
• Evaluate verification logic with functional and vulnerability tests.
• Review Docker environments for accurate multi-container scenarios.
• Identify gaps and provide rubric-based written feedback.
• Assess security tasks across common vulnerability classes.
• Apply evaluation criteria with professional security expertise.

Connaissances

Vulnerability research

Application security

CVE taxonomy

CVSS/CWE/CAPEC

Secure coding

Vulnerability remediation

Two-part verification

Written feedback

Security testing

Outils

Docker

Docker Compose

Description du poste

Appsierra Group is seeking a CVE Vulnerability Expert to work remotely as an independent contractor in the United States. You will apply vulnerability research and application security expertise to evaluate CVE reproductions and remediation approaches for AI systems.

You will review Docker-based environments, provide rubric-based feedback, and help ensure security tasks across common vulnerability classes are accurate and practically relevant.