Security Expert at Mercor

Security Expert | $90–110/hr | Worldwide Remote

Join Mercor in building high-fidelity simulated environments designed to evaluate and train AI models on real-world procurement workflows for a leading spend-management technology company. We're seeking experienced security and vendor-risk professionals to author and validate security-review tasks within these simulated environments.

Key Responsibilities

• Review simulated vendor SOC 2 reports, security questionnaires, and penetration-test evidence against a buyer's security standards
• Identify scope mismatches and lapsed bridge letters that surface-level reviews would typically miss
• Author step-level rubrics and golden responses that capture how an experienced security reviewer would evaluate a request or renewal
• Assess data-handling and sub-processor risk for vendors interacting with sensitive data

Ideal Qualifications

• 8+ years of professional experience in security review, vendor risk management, or third-party risk management (TPRM)
• Hands-on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence
• Strong written communication skills with the ability to produce structured, rubric-style feedback

Nice to Have

• Relevant security certifications such as CISSP or CISA
• Prior experience in task-writing, rubric-authoring, or AI training data creation

This is a contractor engagement offering flexible, hourly work with competitive compensation between $90–$110/hr.