App Security Expert

Requirements

• Application security expertiseMust
• Secure software development experienceMust
• OWASP LLM risks knowledge (Sensitive Information Disclosure, Excessive Agency)Must
• AppSec best practicesMust
• Written and verbal communication skills with focus on technical documentationMust
• Ability to deliver security recommendations in remote contextMust
• 5+ years in application security, secure software development, or CyberSWE roles
• OSWE (Offensive Security Web Expert) certification or expertise
• LLM security understanding
• AI-powered static analysis (AI-SAST) knowledge
• Security architecture design and evaluation for traditional and agent-based applications
• Building, securing, and testing application codebases
• Identifying and remediating advanced vulnerabilities
• Synthetic security fixtures and deterministic testing experience

What you'll do

• Design and implement application fixtures with embedded security vulnerabilities
• Develop deterministic test cases and security-context manifests
• Create detailed answer keys for AI and scanner evaluation of code
• Evaluate and iterate on pipeline methodologies for synthetic tasks
• Document technical insights and methodologies
• Collaborate through written and verbal communication
• Engage with agent-based security architecture

About the role

Role Title: App Security Expert Role Type: Contractor Location: Remote micro1 is engaging App Security Experts to contribute to a customer’s dynamic project focused on real-world application security. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters. Scope of Work • Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency. • Develop deterministic test cases and security-context manifests to robustly assess application security posture. • Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code. • Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment. • Document technical insights and methodologies, ensuring clarity in written feedback and communication. • Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions. • Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline. Preferred Qualifications • Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles. • Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices. • Proven track record designing or evaluating security architecture for traditional and agent-based applications. • Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities. • Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback. • Experience with synthetic security fixtures and deterministic testing approaches is highly desirable. • Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context. Originally posted on Himalayas