CVE Vulnerability Expert

Use your application security and vulnerability research experience to judge CVE reproduction and fix tasks. You check that reproductions are faithful, fixes are sound and Docker labs recreate the flaw, and write clear feedback against a rubric.

What you will do

• Review vulnerability reproduction and remediation tasks for quality, fidelity and completeness.
• Check that CVE reproductions are faithful, fixes are sound and verification logic is rigorous.
• Confirm that Docker-based lab environments accurately recreate exploitable conditions.
• Write clear, rubric-based feedback on each task.

What you need

• 3+ years of hands-on experience in application security, penetration testing or vulnerability research.
• A strong grasp of CVE taxonomy and severity frameworks (CVSS, CWE, CAPEC).
• Proven secure coding and remediation skills across common vulnerability classes, such as SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations and privilege escalation.
• Experience designing or evaluating two-part verification logic: functionality tests plus vulnerability tests.
• Proficiency with Docker and Docker Compose for multi-container reproduction environments.

Nice to have: OSCP, GPEN, GWAPT or an equivalent offensive security certification, experience with CVE disclosure or exploit proof-of-concept code, a DevSecOps, CI/CD security gating or SAST and DAST background, and prior review or QA of security engineering tasks.