Cybersecurity RL Environment Reviewer – Offensive, AppSec

Job not on LinkedIn

🔥 17 hours ago

🇺🇸 United States – Remote

💵 $65 - $250 / hour

⏱ Part Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Widget Factory

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2025

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

Artificial Intelligence • Enterprise • SaaS

Widget Factory builds the environments where advanced AI learns to work. They bring together engineers, operators, and domain experts to design tasks, systems, and real-world challenges that train frontier models. Their projects focus on enabling models to solve ambiguous problems, coordinate across systems, and make decisions under uncertainty. The company emphasizes the intersection of human judgment and machine capability and employs 100+ Problem Design Engineers. Operating since 2025.

📋 Description

• Review cybersecurity reinforcement-learning environments for offensive-security and application-security tasks • Review codebases and described vulnerabilities to confirm they are real, reachable, and findable using only the provided context • Verify patching-task grading fails while an exploit works and passes only after the vulnerability is genuinely fixed • Trace or attempt intended exploit paths to confirm exploit-construction tasks are achievable within the stated constraints • Flag inconsistent files, missing context, unclear requirements, and task ambiguity • Write a clear justification for every accept, reject, or flag decision • Complete a paid sample review before starting regular work

🎯 Requirements

• Hands-on experience finding and validating real vulnerabilities in web applications, APIs, or backend services through bug bounty, penetration testing, red teaming, or AppSec engineering • Comfortable reading unfamiliar code in Python, JS/TS, Java, Go, C/C++, or Rust well enough to trace a vulnerable data path • Able to clearly explain in writing why a vulnerability is or isn't real and reachable • Reliable and self-directed, comfortable working asynchronously with limited day-to-day oversight • Active or past bug bounty track record is nice to have • CTF experience is nice to have • Security certification such as OSCP, OSWE, OSCE, eJPT, eCPPT, or GWAPT is nice to have • Prior experience evaluating or grading other people's security findings is nice to have • Must be currently authorized to work in the US • Must indicate whether sponsorship will be needed now or in the future

🏖️ Benefits

• Part-time, flexible-hours work • Paid sample review (one task, roughly 30–45 minutes)