Application Security Engineer

If you test web apps and APIs and know the OWASP Top 10 inside out, we want your expertise on real-world appsec scenarios. EvalLabs is hiring experienced application security engineers for remote contract work on your schedule.

What you'll do

• Work on real-world security scenarios: attack paths, exploitation, detection, and analysis
• Review technical security content for accuracy and catch what's wrong or missing
• Write expert-level examples based on how the work is actually done in the field

This is project-based work that helps train and evaluate AI models on security. No AI experience needed. We want your security judgment.

The deal

• Up to $80/hr, paid per hour worked
• Fully remote and async, with no meetings or set schedule
• 5–20 hrs a week, no minimum, so it fits next to a full-time job

You have

• 3+ years of professional experience in application security, web/API penetration testing, or secure code review
• Hands-on experience with tools like Burp Suite, OWASP ZAP, Semgrep, sqlmap, Postman, or ffuf
• Nice to have: OSCP, OSEP, OSWE, CPTS, GPEN, GXPN, or similar