Senior Software Security Engineer – AI Trainer

Overview

ExpertWoka is sourcing a Senior Software Security Engineer – AI Trainer for a short-term remote contract focused on creating high-quality training and evaluation tasks for frontier AI coding models.

What You'll Do

• Source and analyze real-world vulnerabilities from CVEs, security advisories, bug reports, and open-source repositories.
• Classify vulnerabilities using the most specific applicable CWE and map them to relevant OWASP Top 10 categories where appropriate.
• Reproduce vulnerabilities and develop reliable proof-of-vulnerability tests.
• Build audit-and-patch tasks across multiple programming languages, including Python, JavaScript/TypeScript, Java, C/C++, C#, Go, Rust, Ruby, PHP, Kotlin, and Swift.
• Write realistic task instructions that describe the security issue without revealing vulnerable code, exploit details, or the expected fix.
• Create reproducible Docker-based environments with pinned dependencies and clear setup procedures.
• Harden verifiers against gaming, overfitting, test manipulation, and hardcoded solutions.
• Review and score AI-generated patches and reasoning using clearly defined technical rubrics.

Requirements

• 5+ years of professional software engineering experience.
• Expert-level proficiency in at least one of Python, JavaScript/TypeScript, Java, C/C++, C#, Go, Rust, Ruby, PHP, Kotlin, or Swift.
• Strong understanding of software security concepts, including CWE, CVE, and the OWASP Top 10.
• Ability to reproduce vulnerabilities and write proof-of-vulnerability tests.
• Hands-on experience with security tooling, including sanitizers, fuzzers, and static-analysis tools such as CodeQL or Semgrep.
• Strong proficiency with Git, Linux, Bash, and Docker.
• Excellent technical writing and documentation skills.
• Ability to work independently in a fully remote, research-oriented environment.

Schedule

• Short-term contract: 3 months.
• Full-time availability required: 40 hours per week.
• Requires 4 hours of overlap with PST.
• Start date: immediate.

Evaluation Process

• Round 1: Technical interview (60 minutes).