Application Security Analyst
Alignerr · Boston, MA
- Hybrid
- Contract
- $60,000 / year
- Boston, MA
Job highlights
- Analyze application security scenarios for AI training.
- Classify vulnerabilities and evaluate remediation strategies.
- Assess real exploitability over theoretical risks.
- Build security datasets for AI risk assessment.
- Contribute to safer AI development remotely.
About the role
Application Security Analyst (AI Training)
Alignerr is seeking experienced application security professionals to partner with leading AI research labs. This role involves teaching AI to understand real-world application security risks, moving beyond traditional security responsibilities to shape how AI systems assess vulnerabilities.
What You'll Do
- Review and analyze realistic application security scenarios across code, APIs, and system behavior.
- Classify vulnerabilities including authentication flaws, injection risks, access control issues, and business logic weaknesses.
- Evaluate secure coding practices and the quality of proposed remediation strategies.
- Distinguish between genuinely exploitable risks and theoretical edge cases.
- Build and validate security-focused reasoning datasets that train AI to assess application risk accurately.
- Provide clear, structured written analysis that translates expert judgment into usable training signals.
Who You Are
- 2+ years of hands-on experience in application, product, or software security.
- Solid familiarity with the OWASP Top 10 and how common vulnerabilities manifest in real production systems.
- Able to assess true exploitability rather than just flag theoretical risks.
- Strong written communication skills — you can explain complex security reasoning clearly and concisely.
- Self-motivated and comfortable working independently in an async environment.
Nice to Have
- Experience with secure code review or penetration testing.
- Background in bug bounty programs or red teaming.
- Familiarity with AI systems or data labeling workflows.
- Knowledge of multiple programming languages or tech stacks.
Why Join Us
- Work directly on frontier AI systems used by leading research labs.
- Fully remote and flexible — work on your schedule, from anywhere.
- Freelance autonomy: choose your hours, manage your own workflow.
- Contribute to meaningful work that makes AI safer and more security-aware.
- Potential for ongoing work and contract extension as new projects launch.
Key skills/competency
- Application Security
- AI Training
- Vulnerability Analysis
- OWASP Top 10
- Secure Coding Practices
- Exploitability Assessment
- Risk Assessment
- Data Labeling
- Penetration Testing
- Bug Bounty Programs
Skills & topics
- Application Security
- Security Analyst
- AI Training
- Vulnerability Assessment
- OWASP Top 10
- Remote Work
- Freelance
- Cybersecurity
- Data Labeling
- Software Security
How to get hired
- Tailor your resume: Highlight your application security experience and OWASP Top 10 knowledge. Quantify achievements in vulnerability analysis and risk assessment.
- Craft a compelling cover letter: Emphasize your understanding of exploitability and your ability to provide clear, concise written analysis. Showcase your remote work and self-motivation skills.
- Prepare for technical questions: Be ready to discuss specific vulnerabilities, secure coding practices, and how you differentiate real risks from theoretical ones.
- Demonstrate communication skills: Showcase your ability to explain complex security concepts clearly, as this is crucial for training AI models.
- Highlight AI interest: If you have experience with AI systems or data labeling, be sure to mention it to show alignment with the role's unique focus.
Technical preparation
Master OWASP Top 10 vulnerabilities.,Practice analyzing code for security flaws.,Learn to distinguish real vs. theoretical risks.,Study secure coding best practices.
Behavioral questions
Describe a complex vulnerability you identified.,How do you assess exploitability of a risk?,Explain a security concept clearly and concisely.,How do you manage work independently?
Frequently asked questions
- What is the primary focus of the Application Security Analyst role at Alignerr?
- The primary focus is to leverage your application security expertise to train AI models. You will analyze security scenarios, classify vulnerabilities, and create datasets that teach AI to assess and reason about real-world application risks.
- Is this a traditional penetration testing role at Alignerr?
- No, this is not a traditional security role. While it utilizes your security knowledge, the core function is to translate your expertise into training data for AI systems, focusing on how AI can understand and evaluate application security.
- What kind of experience is most valuable for an Application Security Analyst at Alignerr?
- The most valuable experience includes at least two years of hands-on application, product, or software security. Strong familiarity with OWASP Top 10, distinguishing exploitability, and clear written communication are essential.
- How does Alignerr support remote work for this Application Security Analyst position?
- Alignerr offers a fully remote work environment with flexible hours, allowing you to choose your schedule and manage your workflow independently. This role is designed for self-motivated individuals comfortable working in an async setup.
- What are the key deliverables for an Application Security Analyst at Alignerr?
- Key deliverables include analyzed security scenarios, classified vulnerabilities, evaluated remediation strategies, and validated security-focused datasets. You will also provide structured written analysis to train AI models.
- What is the expected time commitment for the Application Security Analyst role at Alignerr?
- The commitment is flexible, ranging from 10 to 40 hours per week, depending on project needs and your availability. This allows for freelance autonomy in managing your workload.
- Does Alignerr offer opportunities for ongoing work as an Application Security Analyst?
- Yes, Alignerr offers potential for ongoing work and contract extensions. As new projects launch and AI models evolve, there may be opportunities to continue contributing your expertise.
- What programming languages or tech stacks are relevant for the Application Security Analyst role?
- While not strictly required, knowledge of multiple programming languages or tech stacks is a plus. This can aid in analyzing a wider range of application security scenarios relevant to AI training.