Application Security Engineer

Anyone AI is recruiting experienced Application Security Engineers and Vulnerability Researchers for a specialized project focused on reviewing real-world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments.

We’re looking for security professionals with hands-on experience in penetration testing, vulnerability research, or application security who can determine whether vulnerabilities are reproduced accurately, fixes address the actual root cause, and security tests reliably demonstrate that an exploit has been mitigated.

What You’ll Work On

You’ll review technical security tasks involving:

• CVE vulnerability reproduction

• Exploit proof-of-concepts

• Vulnerability remediation and secure coding

• Application security testing

• Docker-based vulnerability labs

• Exploit verification scripts

• Security regression testing

• CVSS, CWE, and vulnerability classification

• Environment and configuration analysis

• Edge cases and alternative attack paths

A key part of the role is determining whether a vulnerability environment accurately recreates the original attack conditions and whether a proposed fix genuinely eliminates the vulnerability without breaking legitimate functionality.

What We’re Looking For

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research

• Strong understanding of CVE, CVSS, CWE, and common vulnerability classes

• Experience identifying and remediating vulnerabilities such as:

  • SQL injection

  • Command injection

  • SSRF

  • Deserialization vulnerabilities

  • Buffer overflows

  • Privilege escalation

  • Access control issues

  • Security misconfigurations

• Strong understanding of secure coding and vulnerability remediation

• Experience reviewing or developing exploit proof-of-concepts