About the role
About The Job
Mercor
connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include
Benchmark,
General Catalyst,
Peter Thiel,
Adam D'Angelo,
Larry Summers,
and
Jack Dorsey.
Position:
CVE Vulnerability Expert
Type:
Contract
Compensation:
$70–$90/hour
Location:
Remote
Role Responsibilities
- Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks for AI model training.
- Assess CVE reproductions for faithfulness and ensure fixes are sound.
- Verify rigorous logic and ensure Docker-based lab environments accurately recreate exploitable conditions.
- Provide clear, rubric-based written feedback to improve model outputs.
- Collaborate with AI research teams to enhance training data quality and downstream performance.
- Work independently and asynchronously to meet deadlines while improving AI model performance.
Qualifications
Must-Have
- 3+ years of hands-on experience in application security, penetration testing, or vulnerability research.
- Strong understanding of CVE vulnerability taxonomy and severity frameworks (CVSS, CWE, CAPEC).
- Demonstrated expertise in secure coding and remediation across common vulnerability classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, privilege escalation).
- Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests).
- Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments.
Preferred
- OSCP, GPEN, GWAPT, or equivalent offensive-security certification.
- Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof-of-concept code.
- Background in DevSecOps, CI/CD security gating, or SAST/DAST tooling.
- Prior technical content review, assessment design, or QA for security-focused engineering tasks.
Application Process (Takes 20–30 mins to complete)
- Upload resume
- AI interview based on your resume
- Submit form
Resources & Support
- For details about the interview process and platform information, please check:
- For any help or support, reach out to: support@mercor.com
PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
Millions of jobs, with real people getting hired every day
Questions, answered
Click "Apply with JobAssist" – we tailor your resume and application to this role and submit it for your approval.
Yes. This role at Mercor was screened before publishing – we confirmed the employer before listing it.
The employer didn't disclose a salary range for this listing. JobAssist shows pay whenever it's available.
This position can be done from anywhere, with no in-office requirement.
Yes – every application is tailored from your profile and this job's requirements, and you can review and edit before it's sent.