App Security Expert
Role details
Skills the posting asks for
- OSWE
- LLM security
- AI-SAST evaluation
- AppSec
- Agent security architecture
micro1 is engaging App Security Experts to contribute to a customer’s dynamic project focused on real-world application security. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.
Scope of Work
- Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.
- Develop deterministic test cases and security-context manifests to robustly assess application security posture.
- Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.
- Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.
- Document technical insights and methodologies, ensuring clarity in written feedback and communication.
- Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.
- Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.
Preferred Qualifications
- Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles.
- Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.
- Proven track record designing or evaluating security architecture for traditional and agent-based applications.
- Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities.
- Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback.
- Experience with synthetic security fixtures and deterministic testing approaches is highly desirable.
- Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context.
From the micro1 posting.
Applying on micro1
What happens after you click
- The link opens this role on micro1. Sign up and apply from there.
- An AI interview, 20 to 40 minutes.
- If micro1 hires you, they match you to a project.
- Remote — open to United States, Canada, United Kingdom, Ireland, Australia, New Zealand, Germany, France, Netherlands, Belgium, Austria, Switzerland, Denmark, Sweden, Norway, Finland, Iceland, Italy, Spain, Portugal, Greece, Luxembourg, Malta, Cyprus, Liechtenstein and Monaco.
If you're hired and complete 10 hours, micro1 pays this site a referral fee. Your pay is unaffected.
Red Pen Jobs is independent. We are not affiliated with, endorsed by, or acting for micro1 in any way, and we do not recruit on its behalf.
More about micro1: how it pays, what it does not say, and its referral terms.
Already have a micro1 account?
Tell us, and we'll show you where else this kind of work is open, on platforms you may not have tried yet.
The same kind of work on platforms you may not have tried
You can still apply on micro1 below.
The same work on another platform
Already have a micro1 account? A platform you have not signed up to yet is where this kind of work is still open to you. Each one screens and pays on its own terms, so check theirs before applying.
Pays $40–80 an hour. 10 openings. Posted 3 weeks ago.
We read this listing on micro1 on 15 Oct 2026 and checked it again on 10 Nov 2026. We clean its formatting for readability and safety. View on micro1
Not filed under a profession yet, so it is listed with every open role Compare pay rates across professions