CVE Vulnerability Expert

Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks used to train and evaluate a frontier AI lab's models. You'll assess whether CVE reproductions are faithful, fixes are sound, verification logic is rigorous, and Docker-based lab environments accurately recreate exploitable conditions

and provide clear, rubric-based written feedback.

Basic Qualifications

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research
• Strong understanding of CVE vulnerability taxonomy and severity frameworks (CVSS, CWE, CAPEC)
• Demonstrated expertise in secure coding and remediation across common vulnerability classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, privilege escalation)
• Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests)
• Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments

Preferred Qualifications

• OSCP, GPEN, GWAPT, or equivalent offensive-security certification
• Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof-of-concept code
• Background in Dev Sec Ops , CI/CD security gating, or SAST/DAST tooling
• Prior technical content review, assessment design, or QA for security-focused engineering tasks

AI evaluation Research

This opportunity may suit professionals with relevant experience in AI evaluation, Research. Review the official description and requirements before applying.

The listing states $70 - $90 / hour. Confirm the final rate, workload, and payment terms during the official application process.

• You can show recent, specific work involving AI evaluation, Research.
• The listed commitment of 40 hours/week fits your schedule.
• You can communicate your reasoning clearly in the application language.
• You are comfortable with project availability and hours varying over time.