{"html":"<p>Role Title: App Security Expert</p><p>Role Type: Contractor</p><p>Location: Remote</p><p>micro1 is engaging App Security Experts to contribute to a customer’s dynamic project focused on real-world application security. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.</p><p>Scope of Work</p><ul><li>Design and implement small, purpose-built application fixtures with embedded security vulnerabilities or secure solutions, specifically addressing OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.</li><li>Develop deterministic test cases and security-context manifests to robustly assess application security posture.</li><li>Create detailed hidden answer keys to enable accurate AI or scanner evaluation of vulnerable versus secure code.</li><li>Evaluate and iterate on pipeline methodologies to ensure synthetic tasks and fixtures are challenging yet realistic for AppSec assessment.</li><li>Document technical insights and methodologies, ensuring clarity in written feedback and communication.</li><li>Collaborate through clear and thorough written and verbal communication to share findings and review peer contributions.</li><li>Engage with agent-based security architecture and contribute to continuous improvement of the evaluation pipeline.</li></ul><p>Preferred Qualifications</p><ul><li>Extensive experience (ideally 5+ years) in application security, secure software development, or CyberSWE roles.</li><li>Strong understanding of OSWE, LLM security, AI-powered static analysis (AI-SAST), and AppSec best practices.</li><li>Proven track record designing or evaluating security architecture for traditional and agent-based applications.</li><li>Expertise in building, securing, and testing application codebases, including identifying and remediating advanced vulnerabilities.</li><li>Exceptional written and verbal communication skills, with a focus on precise technical documentation and collaborative feedback.</li><li>Experience with synthetic security fixtures and deterministic testing approaches is highly desirable.</li><li>Demonstrated ability to deliver thoughtful insights and actionable security recommendations in a remote contribution context.</li></ul>"}