Application Security Engineer – CVE & Vulnerability Research
Core
Review real-world software vulnerabilities, CVE reproductions, remediation approaches, and exploit verification environments to ensure fixes address root causes without breaking functionality.
Role type
Senior IC application security engineer (vulnerability research & CVE validation)
Builds
Verified vulnerability reproduction environments, validated exploit proof-of-concepts, and secure remediation strategies
Domain
Cybersecurity, Application Security, Vulnerability Research
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
CVE/CVSS/CWE analysis, exploit development, secure coding, Docker environment configuration, vulnerability remediation, regression testing, attack path analysis
Preferred skills
OSCP/GPEN/GWAPT certification, responsible disclosure, automated security testing (Python, requests, pwntools), DevSecOps, SAST/DAST tooling
Technologies
Docker, Docker Compose, Python, requests, curl, pwntools
Responsibilities
Review CVE reproduction environments for technical accuracy, evaluate proposed security fixes and remediation strategies, identify incomplete fixes and alternative exploitation paths, detect regressions introduced by fixes, provide recommendations for improving vulnerability reproductions and verification logic
Seniority
Senior, hands-on IC
