Remote Senior Software Security Engineer - AI Training

Braintrust; United States; Remote; USD 17,000 - 24,000; Part time

Job summary

Turing is seeking a remote freelance security verification engineer to develop and test vulnerability remediation for open-source software. You will reproduce issues, build reproducible Docker-based tests, and craft patch workflows with clear instructions for secure fixes.

The role requires 5+ years of software engineering, expertise in multiple languages, and strong knowledge of CWE/CVE and OWASP Top 10. Expect a technical interview and flexible remote work across time zones.

Qualifications

• 5+ years of professional software engineering experience.
• Proficiency in at least one of Python, JavaScript/TypeScript, Java, C/C++, C#, Go, Rust, Ruby, PHP, Kotlin or Swift.
• Strong knowledge of CWE, CVE and the OWASP Top 10, with experience reproducing vulnerabilities and writing security tests.
• Hands-on experience with sanitizers, fuzzers and static analysis tools such as CodeQL or Semgrep.
• Strong working knowledge of Git, Linux, Bash and Docker.
• Clear technical writing and the ability to work independently.

Responsibilities

• Investigate vulnerabilities from CVEs, security advisories, bug reports and open-source repositories.
• Reproduce security issues and build tests that demonstrate the vulnerability and validate a secure fix.
• Create audit-and-patch tasks with reproducible Docker environments and clear instructions.
• Develop robust verifiers that resist hardcoded solutions and test manipulation.
• Review AI-generated patches and reasoning, and document technical findings.

Skills

Python

JavaScript/TypeScript

Java

C/C++

C#

Go

Rust

Ruby

PHP

Kotlin

Swift

Tools

Docker

CodeQL

Semgrep

Git

Linux

Bash

Job description

Turing is seeking a remote freelance security verification engineer to develop and test vulnerability remediation for open-source software. You will reproduce issues, build reproducible Docker-based tests, and craft patch workflows with clear instructions for secure fixes.

The role requires 5+ years of software engineering, expertise in multiple languages, and strong knowledge of CWE/CVE and OWASP Top 10. Expect a technical interview and flexible remote work across time zones.