Application Security Engineer – CVE

Anyone AI is recruiting experienced Application Security Engineers and Vulnerability Researchers for a specialized project focused on reviewing real-world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.
We’re looking for security professionals with hands-on experience in penetration testing, vulnerability research, or application security who can determine whether vulnerabilities are reproduced accurately, fixes address the actual root cause, and security tests reliably demonstrate that an exploit has been mitigated.
What You’ll Work OnCVE vulnerability reproductionExploit proof-of-conceptsVulnerability remediation and secure codingApplication security testingDocker-based vulnerability labsExploit verification scriptsSecurity regression testingCVSS, CWE, and vulnerability classificationEnvironment and configuration analysisEdge cases and alternative attack pathsWhat We’re Looking For3+ years of hands-on experience in application security, penetration testing, or vulnerability researchStrong understanding of CVE, CVSS, CWE, and common vulnerability classesExperience identifying and remediating vulnerabilities such as:SQL injectionCommand injectionSSRFDeserialization vulnerabilitiesBuffer overflowsPrivilege escalationAccess control issuesSecurity misconfigurationsStrong understanding of secure coding and vulnerability remediationExperience reviewing or developing exploit proof-of-conceptsExperience validating whether security fixes address the root cause rather than only the immediate exploitProficiency with Docker and Docker ComposeAbility to provide clear, technically rigorous written feedbackWhat You’ll Be Responsible ForReviewing CVE reproduction environments for technical accuracyDetermining whether vulnerabilities faithfully reproduce the original attack vector and impactEvaluating proposed security fixes and remediation strategiesReviewing test suites that verify both:Normal application functionality remains intactThe original exploit no longer succeedsIdentifying incomplete fixes and alternative exploitation pathsReviewing Docker environments for correct software versions, services, networking, and configurationDetecting potential regressions or new vulnerabilities introduced by a fixProviding recommendations for improving vulnerability reproductions, fixes, and verification logicNice to HaveOSCP, GPEN, GWAPT, or equivalent security certificationExperience with responsible vulnerability disclosure or CVE reportingExperience maintaining exploit proof-of-concept codeExperience writing automated security tests using tools such as:PythonrequestscurlpwntoolsCustom exploit harnessesDevSecOps experienceFamiliarity with SAST, DAST, and CI/CD security toolingExperience developing or reviewing cybersecurity assessments or technical security challengesExperience with AI evaluation, RLHF, or technical data projectsEngagementWork Type: RemoteEngagement: Part-time, project-based consultingFocus: Application security, vulnerability research, CVE reproduction, and remediationThis role is ideal for security engineers who enjoy understanding how vulnerabilities actually work, reproducing exploits in controlled environments, evaluating security fixes, and identifying subtle gaps that traditional testing may miss.