App Security Expert
** 付款：** 每小时40美元至80美元。角色标题：应用安全专家角色类型：承包商地点：远程微1正在聘请应用安全专业人员为客户的动态项目提供贡献，以真实世界应用安全为重点。在这个角色中，你将把自己的专业知识用于帮助训练下一代人工智能系统。你的工作将通过高质量的现实世界的输入来塑造模型学习，推理和表现的方式。在 AI 上没有先前经验所需。设计和实施具有嵌入式安全漏洞或安全解决方案的小型，专用应用程序装置。具体应对 OWASP LLM 风险如敏感信息披露和过度代理。2.开发确定性测试案例和安全背景表现来强有力的评估应用程序安全姿势。3.创建详细隐藏答复密钥以实现精确的人工智能或扫描仪评价脆弱与安全代码。4.评估并重复管道方法以确保合成任务和设备具有挑战性但对于 AppSec 评估而言实性的。5. 记录技术见解和方法，确保书面反和沟通的清晰性。6.通过明确且彻底的书面和口头交流进行合作，分享发现和审查同行贡献。7.参与代理基础上的安全架构并为评估管道持续改善做出贡献。优先资格 1.在应用程序安全，安全软件开发或网络 SWE 角色方面拥有丰富的经验 （理想是5年以上）. 2.对 OSWE,LLM 安全，人工智能动力静态分析 (AI-SAST) 和 AppSec 最佳实践有强大的了解。3. 4. 建立，保护和测试应用程序代码库的专业知识，包括识别和修复先进漏洞。5. 专注于精确技术文档和协作反的特殊书面和口头沟通技能。6. 有对合成安全装置和确定性测试方法的经验是非常理想的。7. 在远程贡献环境中提供有思维的见解和可操作的安全建议的能力。
查看英文原文
**Pay:** $40-$80 per hour (USD).
Role Title: App Security Expert
Role Type: Contractor
Location: Remote
micro1 is engaging App Security Experts to contribute to a customer’s dynamic project focused on real-world application security. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.
Scope of Work
1. Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.
2. Develop deterministic test cases and security-context manifests to robustly assess application security posture.
3. Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.
4. Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.
5. Document technical insights and methodologies, ensuring clarity in written feedback and communication.
6. Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.
7. Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.
Preferred Qualifications
1. Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles.
2. Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.
3. Proven track record designing or evaluating security architecture for traditional and agent-based applications.
4. Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities.
5. Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback.
6. Experience with synthetic security fixtures and deterministic testing approaches is highly desirable.
7. Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context.