[Hiring] Application Security Engineer @24-MAG

Role Description

We are sharing a specialised consulting opportunity for experienced Application Security Engineers with strong expertise in secure software development, backend engineering, penetration testing, vulnerability assessment, security auditing, and code review to contribute to an advanced AI training and software-engineering evaluation project. Selected professionals will create realistic coding tasks involving feature implementation, bug fixing, and security-sensitive application scenarios, while developing deterministic verifiers that accept valid solutions and reject incorrect or unsafe implementations. No prior experience in AI is required.

Key Responsibilities

• Application Security & Secure Engineering
  • Evaluate software for application-security weaknesses and unsafe implementation patterns
  • Apply secure-coding practices across realistic backend engineering scenarios
  • Identify vulnerabilities affecting confidentiality, integrity, or system reliability
  • Assess security implications of architectural and implementation decisions
  • Apply professional AppSec judgement across production-style codebases
• Penetration Testing & Security Review
  • Apply experience with penetration testing, vulnerability assessment, and security audits
  • Identify weaknesses aligned with common OWASP and CWE categories
  • Review code for exploitable behaviour, insecure assumptions, and configuration risks
  • Evaluate proposed fixes for effectiveness and unintended security consequences
  • Document security findings and technical reasoning clearly
• Coding Task & Backend Development
  • Design challenging coding tasks involving feature implementation and bug fixes
  • Work across Java, Node.js, Go, Rust, TypeScript, Python, C++, or similar languages
  • Develop and evaluate scalable backend services and APIs
  • Define clear technical requirements, constraints, and expected behaviours
  • Apply algorithms, data structures, and sound software-engineering principles
• Debugging, Refactoring & Performance
  • Diagnose complex software defects and identify underlying root causes
  • Resolve bugs and performance bottlenecks across varied codebases
  • Refactor existing code to improve clarity, maintainability, and reliability
  • Implement complex features within mature or large-scale applications
  • Validate changes through automated testing and structured technical review
• Deterministic Verification & Code Quality
  • Build deterministic verifiers for coding tasks and submitted solutions
  • Ensure verification accepts reasonable valid solutions while rejecting incorrect outputs
  • Develop tests covering expected behaviour, edge cases, and failure conditions
  • Review code for correctness, maintainability, performance, and security
  • Provide clear technical documentation supporting reproducible evaluation

Qualifications

• Strong professional experience in application security, backend engineering, or cybersecurity
• Expertise in Java, Node.js, Go, Rust, TypeScript, Python, C++, or a comparable language
• Proven experience building scalable services and APIs
• Strong background in secure coding and application-security review
• Experience with penetration testing, vulnerability assessment, or security auditing
• Familiarity with OWASP, CWE, and common software-security weaknesses
• Strong debugging, automated-testing, and performance-optimisation skills
• Experience implementing complex features in production codebases
• Strong code-review instincts and attention to software quality
• Experience refactoring mature or large-scale systems
• Solid understanding of algorithms, data structures, and core computer-science concepts
• Excellent analytical, problem-solving, and technical communication skills
• Ability to work independently and apply professional judgement without outside assistance
• No prior AI-training or model-evaluation experience is required

Engagement Details

• Independent contractor engagement
• Fully remote
• Expected commitment: approximately 15 hours per week
• Flexible schedule; contributors may choose their working hours and days, including weekends
• Displayed compensation range: $30–$100/hour
• Actual compensation structure is output-based, with payment made per task that meets project specifications
• Task completion time may vary depending on individual experience and workflow
• Minimum weekly submission requirements apply; the source does not specify the exact number of required tasks
• Work will involve application security, backend engineering, coding-task development, bug fixing, deterministic verification, automated testing, and security review
• Screening includes an approximately 30-minute AI interview, a tentative technical assessment, and hiring-manager review
• Roles are typically filled within approximately 48 hours, with initial tasks expected within approximately 24–48 hours after onboarding
• Interviews, assessments, and project work are expected to be completed without outside assistance
• Project scope, workload, codebases, languages, and evaluation standards may evolve depending on project requirements
• Work must be completed without using confidential or proprietary information belonging to any employer, client, institution, or other third party

About the Platform

This opportunity is available through 24-MAG LLC. We connect experienced professionals with remote consulting opportunities across technical, evaluation, and project-based workstreams.

By submitting this application, you acknowledge that your information may be processed by 24-MAG LLC for recruitment and opportunity matching in accordance with our Privacy Policy: https://www.24-mag.com/privacy-policy