Application Security Engineer

If you test web apps and APIs and know the OWASP Top 10 inside out we want your expertise on real-world appsec scenarios. EvalLabs is hiring experienced application security engineers for remote contract work on your schedule.

What youll do

• Work on real-world security scenarios: attack paths exploitation detection and analysis
• Review technical security content for accuracy and catch whats wrong or missing
• Write expert-level examples based on how the work is actually done in the field

This is project-based work that helps train and evaluate AI models on security. No AI experience needed. We want your security judgment.

The deal

• Up to $80/hr paid per hour worked
• Fully remote and async with no meetings or set schedule
• 520 hrs a week no minimum so it fits next to a full-time job

You have

• 3 years of professional experience in application security web/API penetration testing or secure code review
• Hands-on experience with tools like Burp Suite OWASP ZAP Semgrep sqlmap Postman or ffuf
• Nice to have: OSCP OSEP OSWE CPTS GPEN GXPN or similar