About the role

Destinare Services is seeking a Senior Software Security Engineer to develop training and evaluation tasks for advanced AI coding models. You will turn real-world software vulnerabilities into practical audit-and-patch tasks, helping evaluate whether AI systems can identify, understand, reproduce, and securely fix security issues.

This role combines software security research, vulnerability reproduction, benchmark development, automated testing, and technical review. You will work with open-source projects and multiple programming languages.

Responsibilities

- Research vulnerabilities using CVEs, security advisories, bug reports, and open-source repositories.
- Classify vulnerabilities using the most specific applicable CWE and map them to OWASP Top 10 categories where appropriate.
- Reproduce vulnerabilities and write reliable proof-of-vulnerability tests.
- Create realistic audit-and-patch tasks across languages such as Python, JavaScript/TypeScript, Java, C/C++, C#, Go, Rust, Ruby, PHP, Kotlin, and Swift.
- Write task instructions that describe the security issue without revealing the vulnerable code, exploit details, or expected fix.
- Build reproducible Docker environments with pinned dependencies and clear setup instructions.
- Design verifiers that resist test manipulation, hardcoded solutions, and other forms of gaming.
- Review AI-generated patches and reasoning using clear technical rubrics.
- Document vulnerability context, reproduction steps,



expected behavior, patch requirements, and review decisions.

Required qualifications

- 5+ years of professional software engineering experience.
- Expert-level proficiency in at least one of these languages: Python, JavaScript/TypeScript, Java, C/C++, C#, Go, Rust, Ruby, PHP, Kotlin, or Swift.
- Robust understanding of software security concepts, including CWE, CVE, and OWASP Top 10.
- Experience reproducing vulnerabilities and writing proof-of-vulnerability tests.
- Hands-on experience with security tools such as sanitizers, fuzzers, CodeQL, or Semgrep.
- Strong skills with Git, Linux, Bash, and Docker.
- Excellent technical writing and documentation skills.
- Ability to work independently in a fully remote, research-oriented environment.

Work details

- Work arrangement: Fully remote
- Commitment: 40 hours per week
- Schedule: 4 hours of overlap with PST
- Engagement: Contractor assignment
- Contract duration: 3 months
- Expected start: Within one week
- Benefits: No medical or paid leave
- Interview process: One 60-minute technical interview

Pay: Up to ₹1,800,000.00 per year

Application Question(s):

- How many years of professional software engineering experience do you have?
- Do you have a strong understanding of software security concepts, including CWE, CVE, and the OWASP Top 10?
- Which programming language are you most proficient in?

Work Location: Remote

📌 Senior Software Security Engineer (India)
🏢 Destinare Services
📍 India