Information Security Analyst Expert

Security analysts to build the detection and incident response scenarios frontier AI labs use to test model judgment. AfterQuery builds the expert evaluation data that frontier AI labs use to measure and improve their models. We're hiring information security analysts as contractors to author and grade the detection and incident response scenarios those evaluations run on. What you'll actually do Author realistic security scenarios, from alert triage through incident response and remediationWrite reference answers with the investigative reasoning behind each decisionGrade model output for technical accuracy and operational soundnessFlag guidance that reads plausible but would weaken security posture Who this is for Analysts with at least 2 years in security operations, incident response, or vulnerability managementPractitioners with hands on experience across tooling such as SIEM, EDR, and vulnerability scannersAnalysts with depth in at least one area such as detection engineering, threat hunting, or GRCClear writers who can document the reasoning behind an investigative decision Contract and pay $90 to $135/hr, paid weekly via Stripe. Your rate is set from your experience, not negotiated down after you start.Fully remote, fully async. No fixed hours.Minimum 10 hours per week, no maximum. Scale up or down week to week.No screen recording, no keystroke monitoring, no idle timers.Independent contractor. Ongoing project work rather than single task batches. How our hiring process works Apply at /apply/information-security-analyst-expert. About five minutes. Resume plus a few structured questions.Resume review. Every application gets read against a published rubric and gets a decision.Written assessment. You may be asked to take a written assessment for further placement.Onboarding. Sign the contractor agreement, connect Stripe, and get platform access.Project match. You're matched to live work in your specialty, usually within a week of onboarding. About AfterQuery AfterQuery is an expert data lab. We build the evaluation and training data that frontier AI labs use to measure what their models can and can't do in real professional work. Our contributors are practicing professionals, not annotators, and the work is credited, reviewed, and paid at professional rates.

Responsibilities

• Author realistic security scenarios from alert triage through incident response and remediation
• Write reference answers with the investigative reasoning behind each decision
• Grade model output for technical accuracy and operational soundness
• Flag guidance that reads plausible but would weaken security posture

Required qualifications

• 2+ years of professional security operations, incident response, or vulnerability management experience
• Hands on experience with security tooling such as SIEM, EDR, and vulnerability scanners
• Depth in at least one area such as detection engineering, threat hunting, or GRC
• Clear written English for documenting investigative and remediation reasoning
• Able to commit at least 10 hours per week

Preferred qualifications

• Certifications such as Security+, CySA+, CISSP, or GIAC
• SOC leadership or incident commander experience
• Scripting or automation experience with Python or PowerShell

Why apply

• $90 to $135/hr, paid weekly via Stripe
• 100% remote and fully async
• Shape how frontier models reason about security operations
• Ongoing project work with hours you set each week

Where you can work

This role is 100% remote: you can work from any country except Afghanistan, Argentina, Bangladesh, Burundi, Bolivia, Brazil, Belarus, DR Congo, Central African Republic, Congo (Republic), Chile, China, Colombia, Cuba, Dominican Republic, Egypt, Eritrea, Ghana, Gibraltar, Haiti, Iraq, Iran, Japan, Cambodia, Comoros, North Korea, South Korea, Libya, Monaco, Myanmar, Macau, Nigeria, Nicaragua, Palestine, Paraguay, Russia, Saudi Arabia, Sudan, Somalia, South Sudan, Syria, Chad, Turkmenistan, Uruguay, Venezuela, Yemen and Zimbabwe.