Cybersecurity Expert at Mercor

Cybersecurity Expert | $80–90/hr | Worldwide Remote

Mercor is seeking senior cybersecurity professionals to design evaluation tasks for AI systems operating in enterprise security environments. Contributors will build realistic scenarios, draft reference outputs, and author rubrics that reflect how experienced security leaders think and operate — across both US and International compliance tracks.

Role Overview

This role supports two standards tracks:

• US Track: NIST Cybersecurity Framework, SOC 2
• International Track: ISO 27001, EU NIS2 Directive

Experts qualified in either or both tracks are encouraged to apply.

Key Responsibilities

• Design cybersecurity scenarios spanning SOC monitoring, incident response, forensics, vulnerability management, and security architecture.
• Build tasks across threat detection, digital forensics, penetration testing, security engineering, and governance/risk/compliance (GRC).
• Develop scenarios involving enterprise tools such as Splunk, Microsoft Sentinel, CrowdStrike, Tenable, Qualys, and major GRC platforms.
• Apply methodologies including threat modeling, incident response playbooks, and risk assessments aligned to the relevant standards track.
• Produce reference incident reports, security assessments, architecture designs, and compliance documentation.
• Author rubrics that distinguish authentic security judgment from generic or certification-exam-level responses.

Ideal Qualifications

• 5+ years of experience as a security engineer, CISO, or senior security leader at a major company or security firm (e.g., Mandiant, CrowdStrike, or in-house CISO role).
• Direct ownership of incident response programs, security architecture, or compliance initiatives.
• Strong fluency in security tooling and current threat landscapes, with solid understanding of regulatory frameworks.
• Recognized professional credential strongly preferred: CISSP, CISM, or an international equivalent.
• Prior experience in rubric writing or training content authorship is a plus.