CVE Vulnerability Expert - Security

About The Job Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark , General Catalyst , Peter Thiel , Adam D'Angelo , Larry Summers , and Jack Dorsey .

Position: CVE Vulnerability Expert

Type: Contract Compensation: $70–$90/hour Location: Remote Role Responsibilities

• Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks for AI model training.
• Assess CVE reproductions for faithfulness and ensure fixes are sound.
• Verify rigorous logic and ensure Docker-based lab environments accurately recreate exploitable conditions.
• Provide clear, rubric-based written feedback to improve model outputs.
• Collaborate with AI research teams to enhance training data quality and downstream performance.
• Work independently and asynchronously to meet deadlines while improving AI model performance.

Qualifications Must-Have

• 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
• Strong understanding of CVE vulnerability taxonomy and severity frameworks (CVSS, CWE, CAPEC).
• Demonstrated expertise in secure coding and remediation across common vulnerability classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, privilege escalation).
• Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests).
• Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments.

Preferred

• OSCP, GPEN, GWAPT, or equivalent offensive-security certification.
• Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof-of-concept code.
• Background in DevSecOps, CI/CD security gating, or SAST/DAST tooling.
• Prior technical content review, assessment design, or QA for security-focused engineering tasks.

Application Process (Takes 20–30 mins to complete)

• Upload resume
• AI interview based on your resume
• Submit form

Resources & Support

• For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome
• For any help or support, reach out to: [email protected]

PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity. ,