Application Security Engineer – CVE & Vulnerability Research
New
A
Anyone AIApplication security
Location: Argentina - Fully Remote
Secondary Locations: Uruguay, Chile, Ecuador - Fully Remote, Portugal, Mexico - Fully Remote, Colombia - Fully Remote, Spain, BrazilContractMiddle
Salary65 USD per hour
Apply NowOpens the employer's application page
Job Details
- Experience
- 3+ years of hands-on experience in application security, penetration testing, or vulnerability research
- Required Skills
- Docker
Requirements
- Have 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
- Understand CVE, CVSS, CWE, and common vulnerability classes.
- Have experience identifying and remediating vulnerabilities such as SQL injection, command injection, SSRF, deserialization vulnerabilities, buffer overflows, privilege escalation, access control issues, and security misconfigurations.
- Understand secure coding and vulnerability remediation.
- Have experience reviewing or developing exploit proof-of-concepts.
- Have experience validating whether security fixes address root causes rather than only immediate exploits.
- Be proficient with Docker and Docker Compose.
- Provide clear, technically rigorous written feedback.
- OSCP, GPEN, GWAPT, or equivalent security certification is a nice-to-have.
- Experience with responsible vulnerability disclosure or CVE reporting is a nice-to-have.
- Experience maintaining exploit proof-of-concept code is a nice-to-have.
- Experience writing automated security tests using Python, requests, curl, pwntools, or custom exploit harnesses is a nice-to-have.
Responsibilities
- Review CVE reproduction environments for technical accuracy.
- Determine whether vulnerabilities faithfully reproduce the original attack vector and impact.
- Evaluate proposed security fixes and remediation strategies.
- Review test suites for both intact normal functionality and failed exploit attempts.
- Identify incomplete fixes and alternative exploitation paths.
- Review Docker environments for correct software versions, services, networking, and configuration.
- Detect potential regressions or new vulnerabilities introduced by a fix.
- Recommend improvements to vulnerability reproductions, fixes, and verification logic.
View Full Description & ApplyYou'll be redirected to the employer's site
