Information Security Analyst Expert

About the role

<p>Security analysts to build the detection and incident response scenarios frontier AI labs use to test model judgment.</p>

<p>AfterQuery builds the expert evaluation data that frontier AI labs use to measure and improve their models. We're hiring information security analysts as contractors to author and grade the detection and incident response scenarios those evaluations run on.</p>

<p><strong>What you'll actually do</strong></p>

<ul><li>Author realistic security scenarios, from alert triage through incident response and remediation</li><li>Write reference answers with the investigative reasoning behind each decision</li><li>Grade model output for technical accuracy and operational soundness</li><li>Flag guidance that reads plausible but would weaken security posture</li></ul>

<p><strong>Who this is for</strong></p>

<ul><li>Analysts with at least 2 years in security operations, incident response, or vulnerability management</li><li>Practitioners with hands on experience across tooling such as SIEM, EDR, and vulnerability scanners</li><li>Analysts with depth in at least one area such as detection engineering, threat hunting, or GRC</li><li>Clear writers who can document the reasoning behind an investigative decision</li></ul>

<p><strong>Contract and pay</strong></p>

<ul><li><strong>$90 to $135/hr</strong>, paid weekly via Stripe. Your rate is set from your experience, not negotiated down after you start.</li><li>Fully remote, fully async. No fixed hours.</li><li>Minimum 10 hours per week, no maximum. Scale up or down week to week.</li><li>No screen recording, no keystroke monitoring, no idle timers.</li><li>Independent contractor. Ongoing project work rather than single task batches.</li></ul>

Why apply

• $90 to $135/hr, paid weekly via Stripe
• 100% remote and fully async
• Shape how frontier models reason about security operations
• Ongoing project work with hours you set each week

Responsibilities

• Author realistic security scenarios from alert triage through incident response and remediation
• Write reference answers with the investigative reasoning behind each decision
• Grade model output for technical accuracy and operational soundness
• Flag guidance that reads plausible but would weaken security posture

Required qualifications

• 2+ years of professional security operations, incident response, or vulnerability management experience
• Hands on experience with security tooling such as SIEM, EDR, and vulnerability scanners
• Depth in at least one area such as detection engineering, threat hunting, or GRC
• Clear written English for documenting investigative and remediation reasoning
• Able to commit at least 10 hours per week

Preferred qualifications

• Certifications such as Security+, CySA+, CISSP, or GIAC
• SOC leadership or incident commander experience
• Scripting or automation experience with Python or PowerShell