United States
1 month ago

Job Overview

Job Type
Full Time
Pay
USD 70 – 90 (hourly)

Job description

Salary:
USD 70 - 90 per hour
Location:
United States
Work arrangement:
Remote

Role Summary

Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark , General Catalyst , Peter Thiel , Adam D'Angelo , Larry Summers , and Jack Dorsey .

  • Position: CVE Vulnerability Expert
  • Type: Contract
  • Compensation: $70–$90/hour
  • Location: Remote
  • Role Responsibilities

Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks for AI model training.

Assess CVE reproductions for faithfulness and ensure fixes are sound.

Verify rigorous logic and ensure Docker-based lab environments accurately recreate exploitable conditions.

Provide clear, rubric-based written feedback to improve model outputs.

Collaborate with AI research teams to enhance training data quality and downstream performance.

Work independently and asynchronously to meet deadlines while improving AI model performance.

Requirements

  • 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
  • Strong understanding of CVE vulnerability taxonomy and severity frameworks ( CVSS , CWE , CAPEC ).
  • Demonstrated expertise in secure coding and remediation across common vulnerability classes ( SQL injection , command injection , buffer overflow , deserialization , SSRF , misconfigurations , privilege escalation ).
  • Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests).
  • Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments.

Preferred

  • OSCP , GPEN , GWAPT , or equivalent offensive-security certification.
  • Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof-of-concept code.
  • Background in DevSecOps , CI/CD security gating, or SAST/DAST tooling.
  • Prior technical content review, assessment design, or QA for security-focused engineering tasks.
  • Application Process (Takes 20–30 mins to complete)
  • Upload resume
  • AI interview based on your resume
  • Submit form
  • Resources & Support
  • For details about the interview process and platform information, please check:

Additional Information

PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.

Role:
Application Security Specialist - Fully Remote | Upto $90/hr
Job Type:
Full Time

Company profile

Mercor is an AI data company that connects domain experts across hundreds of professional fields with frontier AI labs and enterprises. Experts on its platform train and evaluate AI models, and its APEX benchmark family measures how AI performs on real-world professional work. Mercor Enterprise helps large companies capture how their most skilled people work and turn that expertise into AI agents. Founded in 2023, the company has offices in San Francisco, NYC and London.

Founded
2023
Funding Stage
Series C

More jobs at mercor

Similar Security Engineer jobs at other companies