About the Role
We're partnering with the world's leading AI research labs to build the next generation of AI-powered security tools — and we need experienced incident responders to make it happen.
As an Incident Response Analyst, you'll work with realistic security incident data to evaluate, challenge, and improve how AI systems analyze threats, correlate alerts, and support digital investigations. Your real-world SOC expertise will directly shape how AI understands and responds to modern cyber threats.
- Organization: Alignerr
- Type: Hourly Contract
- Location: Remote
- Commitment: 10–40 hours/week
What You'll Do
- Analyze realistic security events, alerts, and incident cases to evaluate AI-generated responses
- Assess impact, root cause, and appropriate remediation steps for simulated and real-world scenarios
- Review and critique detection rules, alerting pipelines, and investigative playbooks
- Verify that AI-generated incident analysis accurately reflects how real security operations teams work
- Provide structured, expert feedback that helps AI systems become more accurate and reliable
Who You Are
- 2+ years of hands-on experience in a SOC, incident response, or security operations role
- Proficient with SIEM platforms, alert queues, and investigation tooling
- Skilled at distinguishing meaningful threats from background noise
- Clear and structured communicator — able to explain your analytical reasoning in writing
- Self-motivated and comfortable working independently on async, task-based assignments
Nice to Have
- Experience with threat hunting, digital forensics, or detection engineering
- Familiarity with frameworks like MITRE ATT&CK or NIST incident response
- Background in cloud security, endpoint detection, or network-based investigations
Why Join Us
- Work on cutting-edge AI projects alongside top security and AI research teams
- Fully remote and flexible — work on your own schedule
- Freelance autonomy with meaningful, high-impact work
- Contribute to AI systems that will define the future of cybersecurity operations
- Potential for ongoing work and contract extension