Back to jobs

App Security Expert, Remote - Contract

Xperteez TechnologyRemote (Worldwide)Posted 1w ago
AI Engineer
Contractor
Remote
Craft my tailored resume free

Free to start · No card

Job description

Role Title: App Security Expert

Role Type: Contract

Location: Remote

In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.

Required Skills: OSWE, LLM security, Ai-sast evaluation, Appsec, Agent security architecture

Scope of Work

  • Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.

  • Develop deterministic test cases and security-context manifests to robustly assess application security posture.

  • Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.

  • Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.

  • Document technical insights and methodologies, ensuring clarity in written feedback and communication.

  • Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.

  • Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.

Preferred Qualifications

  • Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles.

  • Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.

  • Proven track record designing or evaluating security architecture for traditional and agent-based applications.

  • Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities.

  • Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback.

  • Experience with synthetic security fixtures and deterministic testing approaches is highly desirable.

  • Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context.

Originally posted on Himalayas

Prepare your application

Use the description above to assess your fit for Xperteez Technology. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.

Match requirements to evidence

Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.

Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.

Check the working arrangement

Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.

Review before submitting

Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.

Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.

Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.