CVE Vulnerability Evaluation Expert

About OpenTrain

OpenTrain AI is the hiring and contracting organization for this role. OpenTrain is the #1 platform for finding and building careers in AI training and data labeling, helping contributors discover specialized projects, build a professional profile, and grow in a fast-moving industry.

Creating an OpenTrain account is free, and candidates can apply in minutes for remote opportunities that match their skills and experience.

About AI Training Work

AI training is the human side of building modern artificial intelligence. Experts review examples, evaluate model-generated work, and provide structured feedback that helps AI systems become more accurate, reliable, and useful.

In this role, your cybersecurity expertise supports the evaluation of vulnerability-reproduction and remediation tasks used to train and assess advanced AI models.

The Role

OpenTrain is recruiting a CVE Vulnerability Evaluation Expert to assess the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks. You will determine whether CVE reproductions are faithful, proposed fixes are sound, verification logic is rigorous, and Docker-based environments accurately recreate exploitable conditions.

This is a part-time contractor opportunity for candidates in the United States who can work in English for 20 or more hours per week. The listed compensation is $70-$90 per hour.

• Employment type: Contractor and part time
• Location: United States
• Language: English
• Time commitment: 20+ hours per week
• Pay: $70-$90 per hour

What You'll Do

You will use established rubrics to review security-focused tasks and provide clear written feedback. Your evaluations will help identify weaknesses in vulnerability reproduction, remediation, testing, and technical task design.

• Assess the faithfulness of CVE reproductions and the soundness of proposed fixes
• Evaluate verification logic for rigorous functionality and vulnerability testing
• Review Docker and Docker Compose environments for accurate exploitable-condition reproduction
• Provide rubric-based feedback on task quality, fidelity, and completeness
• Identify improvements to vulnerability-reproduction and remediation workflows

Required Qualifications

The structured listing identifies this opportunity as entry level, while the role-specific requirements call for at least three years of hands-on experience. Candidates should review the requirements carefully and apply only if their background aligns with the technical scope.

• At least 3 years of hands-on experience in application security, penetration testing, or vulnerability research
• Strong understanding of CVE vulnerability taxonomy and CVSS, CWE, and CAPEC severity frameworks
• Expertise in secure coding and remediation across SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, and privilege escalation
• Experience designing or evaluating two-part verification logic covering functionality tests and vulnerability tests
• Proficiency with Docker and Docker Compose for multi-container vulnerability-reproduction environments
• Ability to conduct rubric-based evaluations of CVE reproducibility, fix soundness, and verification logic

Helpful Background

The following experience may strengthen your application but is listed as helpful rather than required.

• OSCP, GPEN, GWAPT, or an equivalent offensive-security certification
• Experience with CVE disclosure, responsible vulnerability reporting, or exploit proof-of-concept maintenance
• Background in DevSecOps, CI/CD security gating, or SAST and DAST tooling
• Prior technical content review, assessment design, or quality assurance for security-focused engineering tasks

How to Apply

Create a free OpenTrain account and apply through OpenTrain. Highlight your application-security, vulnerability-research, secure-coding, verification, and Docker experience so your background is easy to assess for this specialized AI training project.