App Security Expert – Remote

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Create and implement small, targeted application fixtures featuring embedded security vulnerabilities or secure solutions that tackle OWASP LLM risks, such as Sensitive Information Disclosure and Excessive Agency.

• Develop deterministic test cases and security-context manifests to evaluate the security posture of applications.

• Generate comprehensive hidden answer keys for the precise evaluation of vulnerable versus secure code by AI or scanning tools.

• Assess and refine pipeline methodologies to ensure that synthetic tasks and fixtures are both challenging and realistic for AppSec evaluations.

• Record technical insights and methodologies thoroughly.

• Offer clear, written feedback and communication.

• Collaborate through both written and verbal means to share findings and review peer contributions.

• Engage with agent-based security architecture and support the ongoing enhancement of the evaluation pipeline.

⛳️ Requirements

• Extensive experience, preferably 5+ years, in application security, secure software development, or CyberSWE roles.

• Strong grasp of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.

• Demonstrated expertise in designing or assessing security architecture for both traditional and agent-based applications.

• Proven ability to build, secure, and test application codebases, including recognizing and addressing advanced vulnerabilities.

• Outstanding written and verbal communication skills, emphasizing precise technical documentation and constructive feedback.

• Experience with synthetic security fixtures and deterministic testing methodologies is highly desirable.

• Proven capability to provide insightful and actionable security recommendations in a remote working context.

🏝️ Benefits

• 12-month contract.

• 40 hours/week.

• Remote work available worldwide.