Application Security Engineer – CVE & Vulnerability Research

About the role

Anyone AI is seeking experienced Application Security Engineers and Vulnerability Researchers to work on a specialized project reviewing real‑world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments. This remote, part‑time consulting role focuses on ensuring that fixes address root causes without breaking functionality.

Key responsibilities

• Review CVE reproduction environments for technical accuracy and faithful attack recreation.
• Evaluate proposed security fixes and remediation strategies, identifying incomplete fixes or alternative exploitation paths.
• Validate test suites to confirm normal application functionality and that original exploits no longer succeed.
• Inspect Docker‑based labs for correct software versions, services, networking, and configuration.

Required profile

• 3+ years of hands‑on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE, CVSS, CWE and common vulnerability classes such as SQL injection, SSRF, deserialization, buffer overflows, and privilege escalation.
• Proven ability to provide clear, technically rigorous written feedback.

Required skills

• Docker and Docker Compose
• Python (including requests library)
• curl and pwntools
• Experience with exploit proof‑of‑concept development and validation