Remote Application Security (AppSec) & Penetration Testing Specialist — ZR Talent Group

Join ZR Talent Group's remote specialist network as a Remote Application Security (AppSec) & Penetration Testing Specialist — ZR Talent Group earning $40 - $80/hour. Working asynchronously from anywhere in the US, UK, Canada, Australia, New Zealand, Ireland, or South Africa, you will apply your practical background in OSWE, LLM security, AI-SAST evaluation, AppSec to benchmark frontier artificial intelligence models, identify failure modes, and elevate domain-specific accuracy.

Prior experience building machine learning systems is not required—our research partners value authentic practitioner judgment, domain rigor, and clear analytical writing.

Key Responsibilities & Deliverables

• Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.
• Develop deterministic test cases and security-context manifests to robustly assess application security posture.
• Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.
• Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.
• Document technical insights and methodologies, ensuring clarity in written feedback and communication.
• Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.
• Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.

Required Qualifications & Technical Criteria

• Demonstrated professional or advanced academic background in OSWE, LLM security, AI-SAST evaluation, AppSec.
• Strong analytical writing and critical evaluation skills in English.
• Self-directed work ethic suited for an asynchronous, 100% remote research environment.

Preferred Experience & Bonus Attributes

• Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles.
• Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.
• Demonstrated history designing or evaluating security architecture for traditional and agent-based applications.
• Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities.
• Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback.
• Practical background using synthetic security fixtures and deterministic testing approaches is highly desirable.
• Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context.

Compensation, Remote Eligibility & Schedule

• Compensation Band: $40 - $80/hour
• Work Model: 100% Remote / Work From Home with flexible asynchronous scheduling
• Eligible Remote Locations: United States, Canada, United Kingdom, Australia, New Zealand, Ireland, and South Africa
• Current Openings: 10 active specialist positions
• Hiring Organization: ZR Talent Group
• Core Skills & Technologies: OSWE, LLM security, AI-SAST evaluation, AppSec, Agent security architecture