Security Analyst – Remote Contract

About the role

Mercor is seeking a remote Security Analyst to evaluate AI‑generated cybersecurity outputs. This contract position involves reviewing threat analysis, vulnerability assessments, and security architecture recommendations produced by advanced AI models.

Key responsibilities

• Review and assess AI‑generated threat analysis, vulnerability findings, and security architecture suggestions.
• Create realistic cybersecurity scenarios, including incident‑response runbooks, threat‑hunting queries, and penetration‑testing reports.
• Annotate, label, and validate data across use cases such as CVE classification accuracy and SIEM alert triage.
• Provide structured feedback on AI performance against frameworks like NIST CSF and MITRE ATT&CK, and standards such as STIX/TAXII.
• Collaborate asynchronously with research teams to refine evaluation frameworks for cybersecurity AI.

Required profile

• Minimum 3 years of professional experience in cybersecurity within an enterprise, MSSP, consultancy, or government/defense environment.
• Background in SOC analysis, incident response (DFIR), penetration testing, threat intelligence, or security architecture.
• Strong analytical thinking and ability to translate security operations into structured evaluation tasks.
• Clear written communication and meticulous attention to detail.

Required skills

• SOC analysis
• Incident response (DFIR)
• Penetration testing
• Threat intelligence
• Security architecture
• NIST Cybersecurity Framework (CSF)
• MITRE ATT&CK
• STIX/TAXII
• CVE classification
• SIEM alert triage

What we offer

• Task‑based compensation ranging from $1,750 to $2,150 per completed evaluation.
• Weekly performance bonuses for top contributors.
• Potential transition to hourly compensation for sustained high quality.
• Fully remote work with flexible asynchronous collaboration.