Information Security Analyst – Remote Contract

About the role

Mercor is seeking a remote Information Security Analyst to evaluate AI‑generated cybersecurity outputs. You will work on a contract basis, reviewing threat analysis, vulnerability assessments, and security architecture recommendations produced by advanced AI models.

Key responsibilities

• Review and assess AI‑generated threat analysis, vulnerability reports, and security architecture suggestions.
• Create realistic cybersecurity scenarios such as incident‑response runbooks, threat‑hunting queries, and penetration‑testing reports.
• Annotate, label, and validate data across use cases including CVE classification and SIEM alert triage.
• Provide structured feedback on AI accuracy relative to frameworks like NIST CSF, MITRE ATT&CK, and standards such as STIX/TAXII.
• Collaborate asynchronously with research teams to refine evaluation frameworks for cybersecurity AI.

Required profile

• Minimum 3 years of professional experience in cybersecurity within an enterprise, MSSP, consultancy, or government/defense environment.
• Background in SOC analysis, incident response (DFIR), penetration testing, threat intelligence, or security architecture.
• Strong analytical thinking and ability to translate security operations into structured evaluation tasks.
• Clear written communication and meticulous attention to detail.

Required skills

• SOC analysis
• Incident response (DFIR)
• Penetration testing
• Threat intelligence
• Security architecture
• NIST Cybersecurity Framework (CSF)
• MITRE ATT&CK
• STIX/TAXII
• CVE classification
• SIEM alert triage

What we offer

• Task‑based compensation ranging from $1,750 to $2,150 per completed task.
• Performance bonuses for top weekly performers.
• Potential transition to hourly compensation for sustained high quality.