CVE Vulnerability Expert

Job overview

Compensation is $70–$90 per hour. The CVE Vulnerability Expert role is remote. in the structured pay information; the posting describes compensation as $70–$90 per hour. Mercor connects technical talent with leading AI research labs. The expert evaluates vulnerability reproductions and remediation tasks used in AI model training, checking that exploit conditions are faithfully recreated and fixes are sound. Clear, rubric-based feedback helps improve training data quality and downstream model performance.

What you'll do

• Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks
• assess CVE reproductions and verify fixes
• check logic and Docker-based lab environments for accurate recreation of exploitable conditions
• provide rubric-based written feedback
• collaborate with AI research teams to improve training data quality and downstream performance
• work independently and asynchronously to meet deadlines.

What we're looking for

Skills & competencies

cve vulnerability expert

remote

mercor

application security

penetration testing

vulnerability research

cve

cvss

cwe

capec

docker

docker compose

ai model training

Work arrangement

• Weekend coverage required

Why this role

Requires 3+ years of hands-on application security, penetration testing, or vulnerability research experience; knowledge of CVE taxonomy and CVSS, CWE, and CAPEC; secure coding and remediation expertise; and Docker and Docker Compose proficiency. OSCP, GPEN, GWAPT, or equivalent certification is preferred.

About the employer

Mercor is hiring for this role. Industry: All Other Professional, Scientific, and Technical Services. Sector: 54.