Security Engineer, Code Review and Vulnerability Research (Remote Contract)

OpenTrain AI is staffing engineers for a part-time, remote contract project supporting the training of AI coding assistants. The Security Engineer will identify and fix software defects and vulnerabilities, audit code, conduct penetration-testing-style checks, implement backend improvements, and document technical findings.

Responsibilities:

• Hunting down and fixing defects, including exploitable ones, in codebases you did not write
• Auditing code for weaknesses, running pen-test style checks, and rating severity
• Shipping small features and refactors in one of: Python, TypeScript, Go, Rust, Java or C++
• Tuning backend code for performance and hardening it against abuse
• Writing short, clear write-ups of what you found and what you changed

Requirements:

• Genuine hands-on security experience (audits, vulnerability assessment, pen testing)
• Solid general software-engineering skills, backend included; you can refactor legacy code without breaking it
• You know how secure development lifecycles work and what current attacks look like
• You explain technical findings crisply, in English