[Hiring] Application Security Engineer @EvalLabs

Role Description

If you test web apps and APIs and know the OWASP Top 10 inside out, we want your expertise on real-world appsec scenarios. EvalLabs is hiring experienced application security engineers for remote contract work on your schedule.

• Work on real-world security scenarios: attack paths, exploitation, detection, and analysis
• Review technical security content for accuracy and catch what's wrong or missing
• Write expert-level examples based on how the work is actually done in the field

This is project-based work that helps train and evaluate AI models on security. No AI experience needed. We want your security judgment.

Qualifications

• 3+ years of professional experience in application security, web/API penetration testing, or secure code review
• Hands-on experience with tools like Burp Suite, OWASP ZAP, Semgrep, sqlmap, Postman, or ffuf

Requirements

• Nice to have: OSCP, OSEP, OSWE, CPTS, GPEN, GXPN, or similar

Benefits

• Up to $80/hr, paid per hour worked
• Fully remote and async, with no meetings or set schedule
• 5–20 hrs a week, no minimum, so it fits next to a full-time job