Application Security Engineer - CVE & Vulnerability Research
Anyone Ai
Madrid, Spain
about 1 month ago
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Apply on www.indeed.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Contract type
Permanent contract
Employment type
Part-time (≤ 32 hours)
Experience required
3 years minimum
Working hours
Regular working hours
Job source
Tech stack
Artificial Intelligence
Software System Penetration Testing
Continuous Integration
Python (Programming Language)
Secure Coding
SQL Injection
Technical Data Management Systems
Software Vulnerability Management
Software Security
GWAPT
Devsecops
Docker
+3 more
Static Application Security Testing
Vulnerability Analysis
Dynamic Application Security Testing
Job description
- Determining whether vulnerabilities faithfully reproduce the original attack vector and impact
- Evaluating proposed security fixes and remediation strategies
- Reviewing test suites that verify both:
- Normal application functionality remains intact
- The original exploit no longer succeeds
- Identifying incomplete fixes and alternative exploitation paths
- Reviewing Docker environments for correct software versions, services, networking, and configuration
- Detecting potential regressions or new vulnerabilities introduced by a fix
- Providing recommendations for improving vulnerability reproductions, fixes, and verification logic
Requirements
- 3+ years of hands-on experience in application security, penetration testing, or vulnerability research
- Strong understanding of CVE, CVSS, CWE, and common vulnerability classes
- Experience identifying and remediating vulnerabilities such as:
- SQL injection
- Command injection
- SSRF
- Deserialization vulnerabilities
- Buffer overflows
- Privilege escalation
- Access control issues
- Security misconfigurations
- Strong understanding of secure coding and vulnerability remediation
- Experience reviewing or developing exploit proof-of-concepts
- Experience validating whether security fixes address the root cause rather than only the immediate exploit
- Proficiency with Docker and Docker Compose
- Ability to provide clear, technically rigorous written feedback, * OSCP, GPEN, GWAPT, or equivalent security certification
- Experience with responsible vulnerability disclosure or CVE reporting
- Experience maintaining exploit proof-of-concept code
- Experience writing automated security tests using tools such as:
- Python
- requests
- curl
- pwntools
- Custom exploit harnesses
- DevSecOps experience
- Familiarity with SAST, DAST, and CI/CD security tooling
- Experience developing or reviewing cybersecurity assessments or technical security challenges
- Experience with AI evaluation, RLHF, or technical data projects
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on www.indeed.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this role…