Land a Remote Job
Mercor · Remote job

CVE Vulnerability Expert

STEP 1 · PRACTICE FIRSTTake a free AI practice interview for this kind of roleGet my practice interview ↓
STEP 2 · APPLYApply on Mercor when you’re readyApply on Mercor →

You apply directly on Mercor's site. Applying is free. Posted Aug 25, 2026.

Get alerts for new jobs onTelegram
STEP 1 · PRACTICE BEFORE YOUR REAL INTERVIEW

Get your free practice interview for this role

Mercor screens applicants online, often with an AI interview. micro1 offers a free, 18-minute AI practice interview with feedback, and we picked the one closest to this role: Network Engineer. It covers:

Network ProtocolsSubnettingFirewall Management

Here’s your practice interview

Allow your microphone when it asks, find a quiet spot, and give yourself about 20 minutes. We’ve also emailed you the link and the free ebook.

Step 2: when you feel ready, apply.

Apply on Mercor →

The practice interview is free and run by micro1. Land Remote Jobs is an independent job board, not part of micro1, Mercor or Turing. Practising helps you prepare; it can’t guarantee the result of your real interview. Want more tips? Read our guide to acing the remote job interview.

STEP 2 · APPLY

Apply for this role

You apply on Mercor's own site. It’s free, and you can apply even if you skip the practice.

Apply on Mercor →

Who this role suits

Working engineers who want flexible, project-based remote work that uses their coding and review skills. A strong portfolio or GitHub helps.

Full job description

Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks used to train and evaluate a frontier AI lab's models. You'll assess whether CVE reproductions are faithful, fixes are sound, verification logic is rigorous, and Docker-based lab environments accurately recreate exploitable conditions — and provide clear, rubric-based written feedback.

Basic Qualifications • 3+ years of hands-on experience in application security, penetration testing, or vulnerability research • Strong understanding of CVE vulnerability taxonomy and severity frameworks (CVSS, CWE, CAPEC) • Demonstrated expertise in secure coding and remediation across common vulnerability classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, privilege escalation) • Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests) • Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments

Preferred Qualifications • OSCP, GPEN, GWAPT, or equivalent offensive-security certification • Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof-of-concept code • Background in DevSecOps, CI/CD security gating, or SAST/DAST tooling • Prior technical content review, assessment design, or QA for security-focused engineering tasks

Last checked open on Oct 28, 2026. Job description provided by Mercor.

Something not working? Tell us

If the practice interview or the apply link doesn’t open, or the job looks closed, let us know and we’ll fix it.

← Browse all remote jobs