Vulnerability Management Analyst

Alignerr; Sydney; Remote; AUD 83,000 - 165,000; Full time

Job summary

Alignerr is seeking a Vulnerability Management Analyst to shape how AI systems understand cybersecurity. This remote, hourly contract role supports 10-40 hours/week, collaborating with top AI labs to drive real-world risk assessment.

You’ll triage CVEs, manage patching workflows, and help translate security reasoning into AI training data for production environments.

Qualifications

• 2+ years of hands-on vulnerability management, security operations, or infrastructure security.
• Familiar with CVE databases, vulnerability scanners, patching workflows and risk prioritization.
• Able to bridge theoretical risk scores with production realities and document reasoning clearly.

Responsibilities

• Analyze vulnerability reports, CVEs, and real-world exposure scenarios across infrastructure and applications.
• Classify severity, exploitability, and business impact to inform risk decisions.
• Evaluate patching strategies, mitigations, and remediation workflows.
• Generate, label, and validate security-reasoning data for AI training and evaluation.
• Review AI outputs for technical accuracy and flag gaps in security logic.

Skills

Vulnerability management

Security operations

Infrastructure security

Risk prioritization

Tools

Tenable

Qualys

Rapid7

Job description

Vulnerability Management Analyst (AI Training)

We're looking for experienced security practitioners to help shape how the next generation of AI understands cybersecurity. At Alignerr, we partner with the world's leading AI research labs — and we need real-world vulnerability management expertise to build AI systems that reason accurately about security risk.

If you've spent time in the trenches triaging CVEs, managing patch cycles, or prioritizing remediation in production environments, your knowledge is exactly what frontier AI needs.

• Organization: Alignerr


• Type: Hourly Contract


• Location: Remote


• Commitment: 10-40 hours/week

What You'll Do

• Analyze vulnerability reports, CVEs, and real-world exposure scenarios across infrastructure and applications


• Classify severity, exploitability, and business impact — the way experienced practitioners actually think about risk


• Evaluate patching strategies, mitigations, and remediation decision-making workflows


• Generate, label, and validate security-reasoning data used to train and evaluate AI systems


• Review AI outputs for technical accuracy and flag gaps in security logic or risk assessment

Who You Are

• 2+ years of hands-on experience in vulnerability management, security operations, or infrastructure security


• Familiar with CVE databases, vulnerability scanners, patching workflows, and risk prioritization frameworks (CVSS, EPSS, etc.)


• Comfortable navigating the gap between theoretical risk scores and what actually matters in a production environment


• Analytical and structured in your thinking — you can explain your reasoning clearly in writing


• Self-directed and reliable in an async, remote work setting

Nice to Have

• Experience with tools like Tenable, Qualys, Rapid7, or similar platforms


• Background in threat intelligence, penetration testing, or security engineering


• Familiarity with cloud infrastructure security (AWS, Azure, GCP)


• Prior experience with AI evaluation, annotation, or red-teaming

Why Join Us

• Work directly on frontier AI systems used by the world's top research labs


• Fully remote and async — work on your own schedule, from anywhere


• Freelance flexibility: choose your hours, control your workload


• Make a lasting contribution to how AI reasons about real-world security


• Potential for ongoing work and contract extension