Application Security Engineer
Core
Review CVE reproduction environments, evaluate vulnerability fixes, and verify remediation strategies to ensure root causes are addressed and functionality remains intact.
Role type
Senior IC application security engineer (vulnerability research & remediation)
Builds
Verified vulnerability fixes and secure application environments
Domain
Cybersecurity / Application Security
Required skills
CVE/CVSS/CWE analysis, secure coding, vulnerability remediation, exploit proof-of-concept development, Docker/Docker Compose, SQL injection, command injection, SSRF, deserialization, buffer overflows, privilege escalation, access control issues, security misconfigurations
Preferred skills
OSCP/GPEN/GWAPT certification, automated security testing with Python/requests/curl/pwntools, DevSecOps, SAST/DAST/CI-CD tooling, AI evaluation/RLHF
Technologies
Docker, Docker Compose, Python, requests, curl, pwntools
Responsibilities
Review CVE reproduction environments for technical accuracy; Evaluate vulnerability fixes and remediation strategies; Review test suites to verify normal functionality and exploit prevention; Identify incomplete fixes, alternative exploitation paths, regressions, and new vulnerabilities; Review Docker environments for correct versions, services, networking, and configuration; Provide technically rigorous recommendations on vulnerability reproductions, fixes, and verification logic
Seniority
Senior, hands-on IC
