App Security Expert

$40–80/hr

rate as listed

Workload: ~15h/week
Engagement: Project-based
Location: Worldwide
Field: STEM and Coding

Build small application fixtures that model realistic vulnerabilities and secure implementations for AI-based security evaluation. Create deterministic tests, security-context manifests, and hidden answer keys focused on risks such as Sensitive Information Disclosure and Excessive Agency.

The work

You will design purpose-built applications containing either intentional vulnerabilities or secure solutions, with emphasis on OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency. Day-to-day work includes implementing fixtures, writing deterministic tests and security-context manifests, producing hidden answer keys, and documenting why code should be classified as vulnerable or secure.

What micro1 screens for

The screening is likely to test whether you can discuss specific application security work under technical follow-up. Relevant depth includes secure software development, OSWE-style analysis, LLM security, AI-powered static analysis, advanced vulnerability identification and remediation, and security architecture for both traditional and agent-based applications. Strong candidates can also explain how they would make synthetic security tasks realistic, reproducible, and difficult without making the expected result ambiguous.

Evaluation and collaboration

You may review peer contributions, identify weaknesses in evaluation pipelines, and recommend changes to task or fixture methodology. The role calls for precise technical documentation, actionable security recommendations, and clear written and verbal explanations of findings. No prior AI experience is required.

Logistics

This is a remote contractor role. The listing does not specify whether work is fully asynchronous, the typical weekly hours, or required collaboration windows, so candidates should confirm those details during screening. The displayed compensation is an observed band, not a guarantee.

Pay band: $40–80/hr

What they look for

OSWE
LLM security
AI-SAST evaluation
AppSec
Agent security architecture

Included with this listing

Interview prep — 10 questions

Matched to what this platform's screening actually measures. Answer each out loud in 60–90 seconds: claim → concrete example → implication.

What it tests: This tests whether your AppSec experience is tied to a verifiable codebase, threat model, investigation method, and concrete security outcome rather than general security oversight.
A strong answer: Describe the application and your responsibility, then trace the vulnerability from discovery through validation, remediation, and regression testing. Include the relevant attack path and evidence used to confirm the fix.
Where people lose it: Candidates lose points by naming a vulnerability category without explaining the affected data flow, exploit preconditions, code-level root cause, or how remediation was verified.

Summary, eligibility guidance and screening preparation are prepared by Sidequest from the platform's posting. Check the source listing before applying.

STEM AND CODING on Sidequest

What stem and coding AI work pays

Rates by specialty, the platforms hiring, and every open role in this field.