Remote | Cybersecurity Research Specialist — $210–$240/hour

We are sharing a specialised remote consulting opportunity for experienced cybersecurity researchers with strong expertise in offensive security, vulnerability research, exploit analysis, reverse engineering, and secure software engineering.

This opportunity supports advanced AI evaluation work focused on complex cybersecurity reasoning and technical security analysis. Selected experts will assess AI-generated vulnerability research, exploit reasoning, root-cause analysis, and defensive recommendations while helping develop rigorous benchmarks for advanced security capabilities.

Key Responsibilities

Vulnerability Research & Analysis

• Evaluate technical analyses of complex software vulnerabilities and security scenarios
• Validate vulnerability root causes across software, operating systems, networks, cloud environments, and web applications
• Assess whether reported vulnerabilities are technically sound and realistically exploitable
• Review security findings for completeness, technical accuracy, and appropriate severity assessment
• Identify missing assumptions, flawed reasoning, or unsupported conclusions in vulnerability analyses

Offensive Security & Exploit Evaluation

• Review AI-generated exploit analyses and multi-stage attack reasoning
• Assess exploitability, technical feasibility, prerequisites, and underlying security assumptions
• Evaluate reasoning involving reverse engineering, binary analysis, memory corruption, application security, and related offensive-security domains
• Critique exploit chains and identify weaknesses or inconsistencies in technical reasoning
• Assess whether proposed mitigations appropriately address identified vulnerabilities

Security Reasoning & Defensive Review

• Evaluate defensive recommendations and secure software engineering guidance
• Review mitigation strategies for technical correctness and practical effectiveness
• Assess reasoning across operating-system, network, web, cloud, browser, mobile, and embedded-security contexts
• Distinguish well-supported security conclusions from speculative or incomplete assessments
• Provide structured written feedback explaining technical evaluation decisions

Benchmark & Evaluation Development

• Contribute to structured benchmarks for advanced AI cybersecurity capabilities
• Develop or refine evaluation criteria for vulnerability analysis and security reasoning
• Review technical evaluation rubrics for realism, completeness, and expert-level difficulty
• Identify security scenarios that effectively test advanced reasoning capabilities
• Help establish consistent standards for evaluating complex cybersecurity outputs

Ideal Profile

• Strong professional or research background in offensive security, vulnerability research, exploit development, application security, product security, or security engineering
• Demonstrated expertise across multiple areas such as reverse engineering, binary analysis, vulnerability research, operating systems, networks, web security, or cryptography
• Multiple recognised technical achievements, such as competitive CTF performance, published CVEs, major bug-bounty findings, security research publications, or significant public technical contributions
• Experience identifying or analysing vulnerabilities affecting widely used open-source or commercial software
• Familiarity with reverse-engineering tools such as IDA Pro, Ghidra, Binary Ninja, Radare2, or comparable platforms
• Experience with fuzzing, symbolic execution, static analysis, dynamic analysis, or related vulnerability-discovery techniques
• Strong programming ability in languages such as C/C++, Rust, Python, Go, or Java
• Ability to communicate complex cybersecurity concepts clearly and precisely in writing
• Experience within a recognised security research laboratory, academic research group, product-security team, or equivalent industry environment is highly valued
• Conference publications or presentations at venues such as Black Hat, DEF CON, USENIX Security, IEEE S&P, ACM CCS, NDSS, or comparable events are highly valued
• Contributions to established open-source security tools or recognised bug-bounty programmes are advantageous
• Relevant advanced security certifications may also be considered

Engagement Details

• Fully remote independent contractor engagement
• Flexible scheduling based on project requirements
• Engagements may be extended, shortened, or concluded based on project needs and performance
• Work must be completed without using confidential or proprietary information belonging to any employer, client, institution, or other third party
• H1-B and STEM OPT support is unavailable for this engagement
• Strong contributors may be considered for additional cybersecurity evaluation projects

About the Platform

This opportunity is available through 24-MAG LLC. We connect experienced professionals with remote consulting opportunities across technical, evaluation, and project-based workstreams.

By submitting this application, you acknowledge that your information may be processed by 24-MAG LLC for recruitment and opportunity matching in accordance with our Privacy Policy: https://www.24-mag.com/privacy-policy.