Security experts check that CVE reproduction tasks are faithful, that fixes are sound and that Docker environments recreate the exploitable condition. It suits application-security or penetration-testing professionals with several years of vulnerability research who can design two-part verification tests.
Sobre la vacante
Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks used to train and evaluate a frontier AI lab's models. You'll assess whether CVE reproductions are faithful, fixes are sound, verification logic is rigorous, and Docker-based lab environments accurately recreate exploitable conditions — and provide clear, rubric-based written feedback.
Basic Qualifications
- 3+ years of hands-on experience in application security, penetration testing, or vulnerability research
- Strong understanding of CVE vulnerability taxonomy and severity frameworks (CVSS, CWE, CAPEC)
- Demonstrated expertise in secure coding and remediation across common vulnerability classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, privilege escalation)
- Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests)
- Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments
Preferred Qualifications
- OSCP, GPEN, GWAPT, or equivalent offensive-security certification
- Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof-of-concept code
- Background in DevSecOps, CI/CD security gating, or SAST/DAST tooling
- Prior technical content review, assessment design, or QA for security-focused engineering tasks
Fuente oficial: work.mercor.com. Los detalles pueden cambiar; la página de la plataforma tiene la última palabra.¿Hay algún error en esta oferta? Avísanos.
Cómo conseguir trabajo en Mercor Más trabajos de programaciónMás trabajos de red teaming y seguridad Todas las vacantes de Mercor Trabajos de entrenamiento de IA para ingenieros de software en EE. UU. ¿Cuánto paga Mercor? ¿Es fiable Mercor? Cómo selecciona Mercor a los candidatos Empleos en EE. UU.
