Skip to content
aitrainer.work - AI Training Jobs Platform

Older listing: position may have been filled

This listing is no longer actively promoted, but you're still welcome to apply. Platforms often reopen roles or keep applications on file.

Software Engineering alignerr

Incident Response Lead, Cyber Security

Alignerr • Remote

Education

Not stated

Type

Hourly

Pay Rate

$40–$80/hr

Listed

Today

Apply opens Alignerr in a new tab.

Check Listing →

About this role

From the Alignerr listing

What You'll Do

  • Evaluate detection alert pipelines, triage workflows, and escalation pathways for quality and consistency
  • Assess the completeness and effectiveness of incident response actions across real or simulated timelines
  • Identify critical gaps in logging coverage, detection logic, and containment procedures
  • Review and validate incident response playbooks for clarity, accuracy, and operational feasibility
  • Summarize recurring incident patterns and pinpoint operational bottlenecks
  • Support ongoing assessments of SOC maturity and overall response readiness
  • Deliver structured, analytical documentation that drives actionable improvements

About the Role

What if your hard-won experience in the SOC trenches could directly strengthen how organizations detect, respond to, and contain real threats? We're looking for a seasoned Incident Response Lead to independently evaluate SOC operations — reviewing detection workflows, stress-testing playbooks, and surfacing the gaps that keep security teams up at night. This is a fully remote, flexible contract engagement. If you've lived through real incidents, built response processes from scratch, or spent time hunting for what others missed — this is work that will feel both familiar and meaningful.

  • Type: Hourly Contract
  • Location: Remote
  • Commitment: Flexible

Who You Are

Must-Have: Nice to Have:

  • Hands-on experience in SOC operations, incident response leadership, or cybersecurity operations
  • Strong working knowledge of detection engineering, response workflows, and incident lifecycle management
  • Sharp analytical thinking with the ability to translate findings into clear, structured written assessments
  • Comfortable working independently and delivering consistent, high-quality evaluations
  • Familiarity with SIEM platforms (e.g., Splunk, Sentinel, Chronicle)
  • Experience with EDR tools and cloud-native detection systems
  • Background in threat intelligence, purple teaming, or adversary simulation
  • Relevant certifications such as GCIH, GCFA, CISSP, or equivalent

Why Join Us

  • Apply deep security expertise to work that has a real, measurable impact on organizational resilience
  • Fully remote and flexible — complete assessments on a schedule that works for you
  • Freelance autonomy with meaningful, structured task-based work
  • Engage with a diverse range of SOC environments, toolsets, and operational challenges
  • Potential for ongoing work and contract extension across new assessments and engagements

Why this role

What if your hard-won experience in the SOC trenches could directly strengthen how organizations detect, respond to, and contain real threats? We're looking for a seasoned Incident Response Lead to independently evaluate SOC operations — reviewing detection workflows, stress-testing playbooks, and surfacing the gaps that keep security teams up at n

Skills and categories

Explore other opportunities in related specializations:

Related jobs

Alignerr

Browse All Jobs from Alignerr

Discover more opportunities on Alignerr that match your skills and interests.

View All Alignerr Jobs →

Verified Reviews

Loading reviews…

Community Reviews

Loading reviews…
💬

Share your experience with Alignerr

Help other candidates make better decisions by leaving a review.

Sign in to leave a review

Common questions

Does Alignerr have a trainer community?

Yes, and it's a genuine strength. Once you're assigned to a project, you join Slack channels where you can get rubric clarifications from admins and talk to other trainers. That kind of support is rare in AI training and matters most when guidelines are ambiguous or shift mid-project.

How hard is the Alignerr assessment?

Hard, and unforgiving. Alignerr uses TestGorilla for timed, role-specific tests: a blank coding environment for engineers, strict grammar and fact-checking for writers. Treat it as one shot. Failing or abandoning it typically locks you out of that role permanently, with no retake.

What does task-based AI training work look like?

Practical, hands-on data work: recording short videos, categorizing images, rating text responses, or analyzing data. Tasks are designed to be short and distinct, typically 5 to 60 minutes each.

What does asynchronous AI training work mean in practice?

No set hours, no check-ins, no meetings. You log in when you want, pick up an available task, complete it, and submit; nobody is waiting on you in real time. That's different from remote employment, where you're expected online during business hours. The tradeoff: you're competing with others for available tasks, so an empty queue means there's simply nothing to do until more work is released.

What does Software Engineering work look like for an Incident Response Lead, Cyber Security?

Tasks here are scoped to Software Engineering, not generic labeling. As an Incident Response Lead, Cyber Security, expect to draw on real domain judgment (evaluating outputs, correcting errors, or providing expert reasoning specific to Software Engineering) rather than following a one-size-fits-all rubric. If you don't have hands-on Software Engineering background, this is likely not the right listing to start with.

What specific skills does this listing call for?

Data Annotation is named directly in the listing. If you don't have hands-on experience with this, expect the screening process to test for it directly rather than accepting adjacent experience as a substitute.

How much does this specific role pay?

This listing is posted at $40–$80/hr, an hourly rate. The range reflects experience level and negotiated terms, not a placeholder, so where you land in it depends on your background and the assessment. Pay can change between when we last checked the listing and when you apply, so confirm the current number on the platform's own application page before committing time.

What happens when I click Apply on this listing?

You'll be taken to Alignerr's external site to complete your application there. This listing links through a referral, but the process is identical to applying directly; the link just routes you correctly. Create an account on their site and follow their onboarding steps.

What is the barrier to entry for Alignerr?

A difficult, timed technical assessment in your specific domain, like Python, physics, or language. Passing it is required before you're eligible for any paid projects.