Remote Part-time Penetration Tester (AI Security Evaluation)

About the role

Mercor is seeking a remote, part‑time Penetration Tester to evaluate AI‑generated security outputs. You will work on a contract basis, reviewing threat analysis, vulnerability assessments, and security architecture recommendations produced by AI models.

Key responsibilities

• Review and evaluate AI‑generated outputs related to threat analysis, vulnerability assessment, and security architecture.
• Create realistic cybersecurity scenarios, including incident response runbooks, threat‑hunting queries, and penetration‑testing reports.
• Annotate, label, and validate data across use cases such as CVE classification accuracy and SIEM alert triage.
• Provide structured feedback on AI accuracy for frameworks (NIST CSF, MITRE ATT&CK) and threat‑intelligence standards (STIX/TAXII).
• Collaborate asynchronously with research teams to refine evaluation frameworks for cybersecurity AI.

Required profile

• 3+ years of professional experience in cybersecurity within an enterprise, MSSP, consultancy, or government/defense environment.
• Background in SOC analysis, incident response (DFIR), penetration testing, threat intelligence, or security architecture.
• Strong analytical thinking and ability to translate security operations into structured evaluation tasks.
• Clear written communication and meticulous attention to detail.

Required skills

• Incident response
• Penetration testing
• Threat hunting
• CVE classification
• SIEM alert triage
• NIST Cybersecurity Framework (CSF)
• MITRE ATT&CK
• STIX/TAXII

What we offer

• Task‑based compensation ranging from $1,750 to $2,150 per completed task.
• Weekly performance bonuses for top contributors.
• Potential transition to hourly compensation for sustained quality work.