Anyone AI
Anyone AI
Anyone AI este o platformă de educație și talente axată pe America Latină, care îi ajută pe inginerii software să își dezvolte carierele în domeniul inteligenței artificiale și al învățării automate. Programele sale la distanță, coordonate de mentori, combină pregătirea tehnică, inclusiv un parcurs pentru dezvoltatori de machine learning, cu pregătirea pentru carieră, precum îndrumare pentru CV și profilul de LinkedIn, pregătire pentru interviuri și exersarea limbii engleze. Compania operează și o piață de talente care conectează comunitatea sa instruită cu angajatori aflați în căutarea unor profesioniști în inteligență artificială, alături de un model orientat spre plasarea în câmpul muncii, care include plăți bazate pe împărțirea veniturilor și parteneriate cu angajatori.

Senior Application Security Engineer, CVE Research (Argentina Remote)

Research CVE reproductions and exploit paths for Anyone AI, then assess remediation through Docker labs and security regression tests. This remote, part-time role is based in Argentina.

Descriere

  • Review application security tasks covering CVE reproduction, exploit proof-of-concepts, remediation, secure coding, Docker labs, and regression testing.
  • Check whether vulnerability environments recreate the original attack conditions.
  • Assess whether proposed fixes address vulnerabilities while preserving legitimate functionality.
  • Verify the technical accuracy of CVE reproduction environments.
  • Assess proposed security fixes and remediation approaches.
  • Review test suites to confirm normal functionality remains intact and the original exploit no longer works.
  • Find incomplete fixes and alternative exploitation paths.
  • Check Docker environments for accurate software versions, services, networking, and configuration.
  • Identify regressions or new vulnerabilities caused by fixes.
  • Recommend improvements to vulnerability reproductions, fixes, and verification logic.

Cerințe

  • At least 3 years of practical experience in application security, penetration testing, or vulnerability research.
  • Strong knowledge of CVEs, CVSS, CWE, and common vulnerability classes.
  • Experience finding and remediating SQL injection, command injection, SSRF, deserialization flaws, buffer overflows, privilege escalation, access control issues, and security misconfigurations.
  • Strong knowledge of secure coding and vulnerability remediation.
  • Experience reviewing or creating exploit proof-of-concepts.
  • Experience checking whether security fixes resolve root causes.
  • Proficiency with Docker and Docker Compose.
  • Able to provide clear, technically rigorous written feedback.
  • OSCP, GPEN, GWAPT, or an equivalent security certification is a plus.
  • Experience with responsible vulnerability disclosure or CVE reporting is a plus.
  • Experience maintaining exploit proof-of-concept code is a plus.
  • Experience writing automated security tests using Python, requests, curl, pwntools, or custom exploit harnesses is a plus.
  • DevSecOps experience is a plus.
  • Familiarity with SAST, DAST, and CI/CD security tools is a plus.
  • Experience developing or reviewing cybersecurity assessments or technical security challenges is a plus.
  • Experience with AI evaluation, RLHF, or technical data projects is a plus.

Beneficii

  • Remote work.
  • Part-time, project-based consulting engagement.
  • Hourly compensation of $65.

Locuri de muncă similare

General Dynamics Information Technology

Senior AI Engineer and Architect

General Dynamics Information Technology

Lead AI, machine learning, and large language model architecture for General Dynamics Information Technology’s government, defense, and intelligence missions. Take solutions from proof of concept to production across complex operational settings.

Deschide
Chemin AI

Mandarin and Korean Translation Reviewer

Chemin AI

Review Korean e-commerce content against Traditional Chinese translations for Kaya by Chemin, checking accuracy, fluency, and meaning against quality guidelines.

Deschide