CVE Vulnerability Expert (Remote, Contract, AI training) — Mercor via AI Gig Scout

Mercor is hiring CVE Vulnerability Experts for remote contract work at $70–$90/hr (listed at 40 hrs/week), open to applicants in the United States. You will evaluate the quality, fidelity and completeness of vulnerability-reproduction and remediation tasks used to train and evaluate a frontier AI lab's models.

You'll assess whether CVE reproductions are faithful, fixes are sound, verification logic is rigorous and Docker-based lab environments accurately recreate exploitable conditions, and provide clear, rubric-based written feedback.

Basic qualifications: 3+ years of hands-on application security, penetration testing or vulnerability research; strong understanding of CVE taxonomy and severity frameworks (CVSS, CWE, CAPEC); secure coding and remediation expertise across common vulnerability classes (SQL injection, command injection, buffer overflow, deserialization, SSRF, misconfigurations, privilege escalation); experience with two-part verification logic (functionality tests plus vulnerability tests); proficiency with Docker and Docker Compose. Preferred: OSCP, GPEN, GWAPT or equivalent; CVE disclosure or exploit proof-of-concept experience; DevSecOps, CI/CD security gating or SAST/DAST tooling; prior technical content review or QA for security tasks.

Details and apply link: https://aigigscout.com/jobs/mercor/cve-vulnerability-expert-list-aaabodrlttvzobh5-cnk5rfh?utm_source=itrecruitment&utm_medium=jobboard&utm_campaign=aigigscout_growth

Disclosure: posted by AI Gig Scout, an independent listing site (not Mercor). The apply link may be a referral link.