waypointjobs

Confidential

CVE Vulnerability Researcher for AI Model Evaluation

Lake In The Hills, IL

Check who can apply and the requirements below before continuing.

This job is closed

Applications are no longer available for this announcement. Explore current related opportunities below.

Job description

Help strengthen AI security training by assessing vulnerability reproduction and remediation tasks for technical accuracy, realism, and completeness. You will evaluate CVE reproductions, proposed fixes, verification methods, and Docker-based lab environments, then provide clear written feedback using defined rubrics.

Key Responsibilities Review vulnerability reproduction and remediation tasks used to train and evaluate advanced AI models.

Assess whether CVE reproductions faithfully represent the underlying vulnerability and exploitable conditions.

Evaluate the soundness of remediation approaches and the rigor of verification logic.

Review Docker and Docker Compose environments to confirm they accurately recreate multi-container vulnerability scenarios.

Deliver clear, rubric-based written feedback on quality, fidelity, and completeness.

Qualifications 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.

Strong knowledge of CVE taxonomy and severity frameworks, including CVSS, CWE, and CAPEC.

Demonstrated secure-coding and remediation expertise across SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, and privilege escalation.

Experience designing or evaluating two-part verification approaches that include functionality tests and vulnerability tests.

Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments.

Offensive-security certifications such as OSCP, GPEN, GWAPT, or an equivalent are preferred.

Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof-of-concept code is preferred.

Experience in DevSecOps, CI/CD security gating, SAST/DAST tooling, technical content review, assessment design, or QA for security-focused engineering tasks is preferred.

Work Terms Remote role, available to candidates located in the United States.

Hourly engagement.

Compensation $70 to $90 per hour.

Who can apply

Review the original listing for work authorization, qualifications and employer requirements.

Explore related searches

Current related jobs

The Prolift Rigging Company

WhatJobs

Regional Engineering Manager

denver, CO

Salary not specified

ProLift Rigging is a privately owned, purpose-driven industrial construction company that has a unique, opportunistic, and growth-oriented cultur…

Last received from source 2026-10-23View job

The Prolift Rigging Company

WhatJobs

Engineering Manager

memphis, TN

See pay details in description

Build something extraordinary. Lead with purpose. Engineer what's next. What if your next leadership role wasn't about maintaining an engineerin…

Last received from source 2026-10-23View job

UVA Health

WhatJobs

Interventional Radiology Technologist

charlottesville, VA

$41.00 - $56.50 hourly

Interventional Radiology is where advanced imaging, procedural expertise, and life-changing patient care converge. At UVA Health, Interventional …

Last received from source 2026-10-23View job

UVA Health

WhatJobs

CT technologist

charlottesville, VA

$35.00 - $51.17 hourly

CT Technologist Where advanced imaging expertise directly shapes patient outcomes, education, and discovery. CT Technologists at UVA Health …

Last received from source 2026-10-23View job

Dollar General

WhatJobs

Fleet Mechanic

marion, IN

Salary not specified

This job is in Marion IN Are you fascinated by the workings of vehicles and take pride in ensuring they perform at their best? If you possess a…

Last received from source 2026-10-23View job