Review codebases and described vulnerabilities to confirm they are real, reachable, and findable using only the given context.
Validate patching tasks by ensuring the grading fails while the exploit still works and passes only after a genuine fix.
Trace or attempt exploit paths for exploit-construction tasks and flag anything that makes a task unsolvable or ambiguous.

Who You Are:

Hands-on experience finding and validating real vulnerabilities in web applications, APIs, or backend services.
Comfortable reading unfamiliar code in languages like Python, JS/TS, Java, Go, C/C++, or Rust.
Able to write clear, concise justifications for your verdicts, and work independently in an async environment.

Compensation & How to Apply:

Hourly, part-time pay ranging from $65/hour to $250/hour depending on experience and track record.
Share links to bug bounty profiles, CTF team pages, GitHub, or public write-ups/CVEs.
Final step is a short, paid sample review task of roughly 30–45 minutes.

Idlexperts

idlexperts is idler's quality assurance network of part-time, remote experts who review reinforcement-learning environments before they reach customers. The culture is flexible, async, and self-directed, with experts expected to work a handful of hours per week and deliver clear written judgments.

Apply for This Position