Cyber Threat Investigator – Remote Contract

About the role

Mercor is seeking a skilled Cyber Threat Investigator to join its remote blue‑team engineering effort on a contract basis. You will help shape the evaluation framework for AI‑driven security tools by building realistic, SOC‑level benchmark tasks.

Key responsibilities

• Design and build benchmark tasks that reflect real SOC detection and engineering work.
• Create realistic evaluation environments, including multi‑host networks, Active Directory, and cloud control planes.
• Define measurable criteria for blue‑team AI reasoning and develop scalable infrastructure to assess model performance.
• Translate blue‑team workflow experience into rigorous evaluation designs.
• Work independently and asynchronously to meet deadlines while improving AI model outcomes.

Required profile

• Hands‑on blue‑team experience in detection engineering, threat hunting, incident response, or malware analysis.
• Strong scripting abilities and familiarity with cloud and enterprise environments.

Required skills

• Detection engineering
• Threat hunting
• Incident response
• Malware analysis
• Scripting (e.g., Python, Bash)
• Cloud platforms (AWS, Azure, GCP)
• Active Directory
• Multi‑host network simulation

What we offer

• Competitive hourly rate up to $140/hr.
• Fully remote work arrangement.
• Opportunity to influence cutting‑edge AI security research.