{"id":936287,"url":"https://alion.io/job/anyone-ai-application-security-engineer-cve-vulnerability-research","title":"Application Security Engineer – CVE & Vulnerability Research","company":{"id":9137,"name":"Anyone AI","domain":"anyoneai.com","url":"https://alion.io/company/anyone-ai","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":95,"open_postings":176,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":63,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["AR","BR","CO","MX","ES","CL","EC","PT","UY"],"hiring_countries_total":9,"salary":{"min":65,"max":65,"currency":"USD","period":"hour","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"CWE","optional":false},{"name":"Docker","optional":false},{"name":"Docker Compose","optional":false},{"name":"SQL","optional":false},{"name":"CI/CD","optional":true},{"name":"pwntools","optional":true},{"name":"Python","optional":true},{"name":"RLHF","optional":true}],"status":"live","first_seen_at":"2026-09-15T14:16:29Z","employer_posted_date":"2026-10-10","last_verified_at":"2026-11-06T01:58:48Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":50},"description":"Anyone AI is recruiting experienced Application Security Engineers and Vulnerability Researchers for a specialized project focused on reviewing real-world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.\nWe’re looking for security professionals with hands-on experience in penetration testing, vulnerability research, or application security who can determine whether vulnerabilities are reproduced accurately, fixes address the actual root cause, and security tests reliably demonstrate that an exploit has been mitigated.\nWhat You’ll Work On\nYou’ll review technical security tasks involving:\nCVE vulnerability reproduction\n\nExploit proof-of-concepts\n\nVulnerability remediation and secure coding\n\nApplication security testing\n\nDocker-based vulnerability labs\n\nExploit verification scripts\n\nSecurity regression testing\n\nCVSS, CWE, and vulnerability classification\n\nEnvironment and configuration analysis\n\nEdge cases and alternative attack paths\n\nA key part of the role is determining whether a vulnerability environment accurately recreates the original attack conditions and whether a proposed fix genuinely eliminates the vulnerability without breaking legitimate functionality.\nWhat We’re Looking For\n3+ years of hands-on experience in application security, penetration testing, or vulnerability research\n\nStrong understanding of CVE, CVSS, CWE, and common vulnerability classes\n\nExperience identifying and remediating vulnerabilities such as:\nSQL injection\n\nCommand injection\n\nSSRF\n\nDeserialization vulnerabilities\n\nBuffer overflows\n\nPrivilege escalation\n\nAccess control issues\n\nSecurity misconfigurations\n\nStrong understanding of secure coding and vulnerability remediation\n\nExperience reviewing or developing exploit proof-of-concepts\n\nExperience validating whether security fixes address the root cause rather than only the immediate exploit\n\nProficiency with Docker and Docker Compose\n\nAbility to provide clear, technically rigorous written feedback\n\nWhat You’ll Be Responsible For\nReviewing CVE reproduction environments for technical accuracy\n\nDetermining whether vulnerabilities faithfully reproduce the original attack vector and impact\n\nEvaluating proposed security fixes and remediation strategies\n\nReviewing test suites that verify both:\nNormal application functionality remains intact\n\nThe original exploit no longer succeeds\n\nIdentifying incomplete fixes and alternative exploitation paths\n\nReviewing Docker environments for correct software versions, services, networking, and configuration\n\nDetecting potential regressions or new vulnerabilities introduced by a fix\n\nProviding recommendations for improving vulnerability reproductions, fixes, and verification logic\n\nNice to Have\nOSCP, GPEN, GWAPT, or equivalent security certification\n\nExperience with responsible vulnerability disclosure or CVE reporting\n\nExperience maintaining exploit proof-of-concept code\n\nExperience writing automated security tests using tools such as:\nPython\n\nrequests\n\ncurl\n\npwntools\n\nCustom exploit harnesses\n\nDevSecOps experience\n\nFamiliarity with SAST, DAST, and CI/CD security tooling\n\nExperience developing or reviewing cybersecurity assessments or technical security challenges\n\nExperience with AI evaluation, RLHF, or technical data projects\n\nEngagement\nWork Type: Remote\nEngagement: Part-time, project-based consulting\nFocus: Application security, vulnerability research, CVE reproduction, and remediation\nThis role is ideal for security engineers who enjoy understanding how vulnerabilities actually work, reproducing exploits in controlled environments, evaluating security fixes, and identifying subtle gaps that traditional testing may miss.","description_format":"text","description_chars":3707,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Argentina","iso":"AR","kind":"country"},{"name":"Brazil","iso":"BR","kind":"country"},{"name":"Colombia","iso":"CO","kind":"country"},{"name":"Mexico","iso":"MX","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"},{"name":"Chile","iso":"CL","kind":"country"},{"name":"Ecuador","iso":"EC","kind":"country"},{"name":"Portugal","iso":"PT","kind":"country"},{"name":"Uruguay","iso":"UY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Bootcamps","Recruiting & Staffing","AI Training Data & Annotation"],"lifecycle":[{"event":"open","at":"2026-09-15T14:47:54Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":0.85,"p_active":0.846,"p_room":0.6,"age_days":50,"expected_fill_days":63,"reasons":["seen:25","velocity","win:late","crowd:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":true},"html_url":"https://alion.io/job/anyone-ai-application-security-engineer-cve-vulnerability-research","json_url":"https://alion.io/job/anyone-ai-application-security-engineer-cve-vulnerability-research.json","meta":{"generated_at":"2026-11-06T04:19:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7423,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9137},"rest":"https://alion.io/mcp/rest/get_company?id=9137"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fanyone-ai-application-security-engineer-cve-vulnerability-research"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fanyone-ai-application-security-engineer-cve-vulnerability-research"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fanyone-ai-application-security-engineer-cve-vulnerability-research"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/anyone-ai-application-security-engineer-cve-vulnerability-research\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fanyone-ai-application-security-engineer-cve-vulnerability-research"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":936287}},{"tool":"search_jobs","arguments":{"company":"anyoneai.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":936287},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}