Cybersecurity Engineer – Blue Team at Mercor

Cybersecurity Engineer – Blue Team | $85–$140/hr | Worldwide Remote

Join a cutting-edge initiative to build the first credible, large-scale benchmarks for blue-team AI evaluation. This role is ideal for a seasoned practitioner ready to shape how defensive security capabilities are measured and validated at scale.

About the Role

Offensive AI benchmarks are abundant — but rigorous blue-team evaluation is nearly nonexistent. This project is building the infrastructure to change that, creating credible benchmarks across detection engineering, threat hunting, incident triage, malware analysis, and incident response. If you've lived the blue-team workflow, this is your opportunity to translate that expertise into meaningful evaluation design.

What You'll Do

• Design and build benchmark tasks grounded in real-world SOC and detection engineering workflows
• Construct realistic evaluation environments including multi-host networks, Active Directory setups, and cloud control planes — well beyond basic single-container scenarios
• Define measurable success criteria for blue-team AI reasoning
• Build reproducible, scalable infrastructure to assess AI performance in defensive security contexts

What We're Looking For

• Hands-on blue-team experience in one or more of: detection engineering, threat hunting, incident response, or malware analysis
• Deep understanding of what strong analyst judgment looks like — enabling you to write evals that genuinely test it
• Strong scripting skills and familiarity with cloud and enterprise environments
• Clear, opinionated perspective on what matters in defensive security and why

Why It Matters

Most AI security evaluations focus on offense. No credible public benchmark exists for defense. This role is your chance to close that gap and set the standard for how blue-team AI capabilities are measured industry-wide.