Anyone AI
Anyone AI
Anyone AI – į Lotynų Ameriką orientuota švietimo ir talentų platforma, padedanti programinės įrangos inžinieriams kurti karjerą dirbtinio intelekto ir mašininio mokymosi srityse. Nuotolinėse, mentorių vadovaujamose programose derinamas techninis mokymas, įskaitant „Machine Learning Developer“ kryptį, ir pasirengimas karjerai: teikiamos gyvenimo aprašymo bei „LinkedIn“ profilio konsultacijos, rengiama pokalbiams su darbdaviais ir praktikuojama anglų kalba. Įmonė taip pat valdo talentų rinką, sujungiančią jos parengtą bendruomenę su dirbtinio intelekto specialistų ieškančiais darbdaviais, ir siūlo įsidarbinimą orientuotą modelį, apimantį nuo pajamų priklausančius mokėjimus bei partnerystes su darbdaviais.

Senior Application Security Engineer, CVE Research (Argentina Remote)

Research CVE reproductions and exploit paths for Anyone AI, then assess remediation through Docker labs and security regression tests. This remote, part-time role is based in Argentina.

Aprašymas

  • Review application security tasks covering CVE reproduction, exploit proof-of-concepts, remediation, secure coding, Docker labs, and regression testing.
  • Check whether vulnerability environments recreate the original attack conditions.
  • Assess whether proposed fixes address vulnerabilities while preserving legitimate functionality.
  • Verify the technical accuracy of CVE reproduction environments.
  • Assess proposed security fixes and remediation approaches.
  • Review test suites to confirm normal functionality remains intact and the original exploit no longer works.
  • Find incomplete fixes and alternative exploitation paths.
  • Check Docker environments for accurate software versions, services, networking, and configuration.
  • Identify regressions or new vulnerabilities caused by fixes.
  • Recommend improvements to vulnerability reproductions, fixes, and verification logic.

Reikalavimai

  • At least 3 years of practical experience in application security, penetration testing, or vulnerability research.
  • Strong knowledge of CVEs, CVSS, CWE, and common vulnerability classes.
  • Experience finding and remediating SQL injection, command injection, SSRF, deserialization flaws, buffer overflows, privilege escalation, access control issues, and security misconfigurations.
  • Strong knowledge of secure coding and vulnerability remediation.
  • Experience reviewing or creating exploit proof-of-concepts.
  • Experience checking whether security fixes resolve root causes.
  • Proficiency with Docker and Docker Compose.
  • Able to provide clear, technically rigorous written feedback.
  • OSCP, GPEN, GWAPT, or an equivalent security certification is a plus.
  • Experience with responsible vulnerability disclosure or CVE reporting is a plus.
  • Experience maintaining exploit proof-of-concept code is a plus.
  • Experience writing automated security tests using Python, requests, curl, pwntools, or custom exploit harnesses is a plus.
  • DevSecOps experience is a plus.
  • Familiarity with SAST, DAST, and CI/CD security tools is a plus.
  • Experience developing or reviewing cybersecurity assessments or technical security challenges is a plus.
  • Experience with AI evaluation, RLHF, or technical data projects is a plus.

Privalumai

  • Remote work.
  • Part-time, project-based consulting engagement.
  • Hourly compensation of $65.

Susiję darbai

EY

AI Software Engineer, Financial Advisory

EY

Build and deploy GenAI, LLM, and MLOps solutions for EY financial advisory clients across the Middle East and North Africa. Contribute to AI strategy, production delivery, and business development.

Atidaryti
Maxibook OÜ

Scientific Language and AI Adaptation Contributor

Maxibook OÜ

Help Maxibook, an AI education startup, adapt English scientific content for Korean, Japanese, or Arabic audiences. Assess AI-generated material for accurate concepts, natural language, and academic credibility.

Atidaryti