Application Security Engineer – CVE & Vulnerability Research

Anyone AI is recruiting experienced Application Security Engineers and Vulnerability Researchers for a specialized project focused on reviewing real-world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.

We’re looking for security professionals with hands-on experience in penetration testing, vulnerability research, or application security who can determine whether vulnerabilities are reproduced accurately, fixes address the actual root cause, and security tests reliably demonstrate that an exploit has been mitigated.

What You’ll Work On

You’ll review technical security tasks involving:

CVE vulnerability reproduction

Exploit proof-of-concepts

Vulnerability remediation and secure coding

Application security testing

Docker-based vulnerability labs

Exploit verification scripts

Security regression testing

CVSS, CWE, and vulnerability classification

Environment and configuration analysis

Edge cases and alternative attack paths

A key part of the role is determining whether a vulnerability environment accurately recreates the original attack conditions and whether a proposed fix genuinely eliminates the vulnerability without breaking legitimate functionality.

What We’re Looking For

3+ years of hands-on experience in application security, penetration testing, or vulnerability research

Strong understanding of CVE, CVSS, CWE, and common vulnerability classes

Experience identifying and remediating vulnerabilities such as:

SQL injection

Command injection

SSRF

Deserialization vulnerabilities

Buffer overflows

Privilege escalation

Access control issues

Security misconfigurations

Strong understanding of secure coding and vulnerability remediation

Experience reviewing or developing exploit proof-of-concepts

Experience validating whether security fixes address the root cause rather than only the immediate exploit