About this opportunity
Confidential lists this Application Security Expert for AI Model Evaluation opportunity in Homewood, Illinois. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Role Overview
Assess vulnerability reproduction and remediation tasks used to train and evaluate advanced AI models. You will determine whether CVE reproductions accurately reflect exploitable conditions, proposed fixes are effective, verification logic is rigorous, and Docker based lab environments faithfully recreate the intended scenarios. Your reviews will include clear, rubric based written feedback on quality, fidelity, and completeness.
Key Responsibilities
Evaluate CVE reproduction and remediation tasks for technical accuracy, completeness, and fidelity.
Review vulnerability reproductions, remediation approaches, and verification methods for soundness.
Assess Docker and Docker Compose environments to confirm they recreate exploitable conditions accurately.
Provide structured written feedback using established review rubrics.
Qualifications
3+ years of hands on experience in application security, penetration testing, or vulnerability research.
Strong knowledge of CVE taxonomy and severity frameworks, including CVSS, CWE, and CAPEC.
Demonstrated secure coding and remediation expertise across SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, and privilege escalation.
Experience designing or evaluating two part verification logic, including functionality tests and vulnerability tests.
Proficiency with Docker and Docker Compose for multi container vulnerability reproduction environments.
Preferred Qualifications
OSCP, GPEN, GWAPT, or a comparable offensive security certification.
Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof of concept code.
Background in DevSecOps, CI/CD security gating, or SAST/DAST tooling.
Prior experience reviewing technical content, designing assessments, or performing QA for security focused engineering tasks.
Work Terms
Remote position open to candidates located in the United States.
Hourly engagement.
Compensation
$70 to $90 per hour.
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.