Remote Part-Time CVE Vulnerability Researcher

24-Mag Llc; Northern (KY); Hybrid; USD 83,000 - 110,000; Part time

Job summary

24-MAG LLC is seeking a part-time vulnerability research consultant for CVE analysis, vulnerability reproduction, and secure remediation tasks. You will review CVE-based scenarios, lab environments, and safety of dockerized labs, providing rubric-based technical feedback.

The ideal candidate has 3+ years in application security or vulnerability research, with hands-on testing, strong written communication, and experience with Docker and CI/CD security controls. This remote role is US-focused.

Qualifications

• 3+ years hands-on experience in application security, vulnerability research or penetration testing.
• Demonstrated ability to evaluate CVE-based scenarios and provide precise technical feedback.
• Experience reviewing vulnerability classifications and remediation strategies.

Responsibilities

• Evaluate vulnerability-reproduction tasks based on documented CVEs.
• Review CVE, CVSS, CWE, CAPEC taxonomy and risk rationale.
• Assess remediation approaches for root-cause fixes and regression risks.
• Review verification logic and ensure reproducibility of tests in Docker-based labs.

Skills

3+ years security experience

Security testing

Vulnerability research

Technical feedback

Education

OSCP GPEN GWAPT (adv.)

Tools

Docker

Docker Compose

Job description

24-MAG LLC is seeking a part-time vulnerability research consultant for CVE analysis, vulnerability reproduction, and secure remediation tasks. You will review CVE-based scenarios, lab environments, and safety of dockerized labs, providing rubric-based technical feedback.

The ideal candidate has 3+ years in application security or vulnerability research, with hands-on testing, strong written communication, and experience with Docker and CI/CD security controls. This remote role is US-focused.