Incident Response Analyst

Alignerr; España; Remote; EUR 55,000 - 99,000; Full time

Job summary

Alignerr is seeking an Incident Response Analyst (AI Training) to work remotely on flexible hours. You will analyze security events and AI-generated responses, ensuring accurate detection and actionable remediation strategies.

The role emphasizes real-world SOC practices, clear written reporting, and independent, asynchronous work on defined tasks. Requires 2+ years in SOC or IR, proficiency with SIEMs, and the ability to distinguish threats from noise.

Qualifications

• 2+ years hands-on experience in SOC, incident response, or security operations.
• Proficient with SIEM platforms and alert queues.
• Skilled at distinguishing genuine threats from noise in high-volume alerts.
• Strong written communication to document findings and reasoning.
• Self-motivated and comfortable working independently on flexible schedules.

Responsibilities

• Analyze realistic security events, alerts, and incident cases to assess AI responses.
• Evaluate AI outputs for accuracy in impact, root cause, and remediation.
• Review detection rules, alert pipelines, and investigative playbooks for real-world validity.
• Verify that AI-generated incident analysis reflects real security operations workflows.
• Provide structured feedback that improves AI model performance.
• Work independently and asynchronously on task-based assignments.

Skills

SOC experience

SIEM platforms

Threat detection

Written communication

Independent work

Job description

About The Role

We're partnering with leading AI research labs to build the next generation of intelligent security tools — and we need real-world incident response professionals to make it happen.

Incident Response Analyst (AI Training)

About The Role

We're partnering with leading AI research labs to build the next generation of intelligent security tools — and we need real-world incident response professionals to make it happen.

As an Incident Response Analyst, you'll work with realistic security incident data to evaluate and improve AI systems designed to detect threats, correlate alerts, and support digital investigations. Your hands‑on SOC experience will directly shape how AI understands and responds to modern cyber threats.

This is a fully remote, flexible contract role — work on your own schedule while contributing to cutting-edge AI development.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10–40 hours/week

What You'll Do

• Analyze realistic security events, alerts, and incident cases to assess AI-generated responses
• Evaluate AI outputs for accuracy in determining impact, root cause, and appropriate remediation
• Review detection rules, alerting pipelines, and investigative playbooks for real-world validity
• Verify that AI-generated incident analysis reflects how actual security operations teams respond
• Provide structured, expert feedback that directly improves AI model performance
• Work independently and asynchronously on task-based assignments

Who You Are

• 2+ years of hands‑on experience in SOC, incident response, or security operations
• Proficient with SIEM platforms, alert queues, and security investigation tools
• Skilled at distinguishing genuine threats from noise in high-volume alert environments
• Strong written communication skills — able to clearly document findings and reasoning
• Self‑motivated and comfortable working independently on flexible schedules
• No prior AI experience required — your security expertise is what matters

Nice to Have

• Experience with digital forensics, threat hunting, or red/blue team operations
• Familiarity with common frameworks such as MITRE ATT&CK or NIST IR
• Background in cloud security, endpoint detection, or network analysis

Why Join Us

• Work on frontier AI systems alongside top-tier research labs
• Fully remote and async — work whenever and wherever suits you
• Freelance autonomy with meaningful, intellectually engaging work
• Your expertise has direct impact on how AI handles real-world cybersecurity challenges
• Potential for ongoing work and contract extension