Vulnerability Management Analyst

Alignerr; Madrid; A distancia; EUR 34.000 - 83.000; A tiempo parcial

Descripción de la vacante

Alignerr is seeking a Vulnerability Management Analyst (AI Training) for remote hourly contract work. You will analyze vulnerability data, assess risk, and shape remediation approaches while helping AI systems learn to distinguish real-world risk from theoretical concerns.

Responsibilities include evaluating CVEs, abuse scenarios, and remediation workflows, plus generating realistic security scenarios for AI training benchmarks.

Formación

• 2+ years in vulnerability management, security operations, or infra security.

Responsabilidades

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and apps.
• Classify severity, impact, exploitability, and recommend remediation strategies.
• Review and evaluate AI-generated reasoning on patching, mitigation, and risk prioritization decisions.
• Generate, label, and validate realistic security scenarios used to train and benchmark AI systems.
• Apply practical knowledge to help AI distinguish between theoretical risk and what matters in production.

Conocimientos

Vulnerability mgmt

CVEs

Vulnerability scanners

Patching workflows

Risk prioritization

Herramientas

Tenable

Qualys

Rapid7

Descripción del empleo

Vulnerability Management Analyst (AI Training)

About The Role

We're partnering with the world's leading AI research labs to build smarter, more security-aware AI systems - and we need practitioners who know how vulnerability management actually works in the real world. This isn't a theoretical exercise. You'll work with realistic CVE data, exposure scenarios, and remediation workflows to help evaluate and improve how AI reasons about cybersecurity risk. Your field experience is exactly what's needed to make AI systems more accurate, trustworthy, and useful for security teams everywhere.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10-40 hours/week

What You'll Do

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and applications
• Classify severity, impact, exploitability, and recommend remediation strategies
• Review and evaluate AI-generated reasoning on patching, mitigation, and risk prioritization decisions
• Generate, label, and validate realistic security scenarios used to train and benchmark AI systems
• Apply your practical knowledge to help AI distinguish between theoretical risk and what actually matters in production

Who You Are

• 2+ years of experience in vulnerability management, security operations, or infrastructure security
• Solid working knowledge of CVEs, vulnerability scanners, patching workflows, and risk prioritization frameworks
• You understand the real-world tradeoffs between textbook severity scores and operational risk
• Analytical and structured thinker who can clearly articulate security reasoning
• Comfortable working independently in a remote, async environment

Nice to Have

• Experience with tools like Tenable, Qualys, Rapid7, or similar platforms
• Familiarity with frameworks such as CVSS, EPSS, or MITRE ATT&CK
• Background in cloud security, patch management, or SecOps
• Prior experience with AI evaluation or data labeling workflows

Why Join Us

• Work directly on frontier AI systems alongside top research labs
• Fully remote and flexible - work on your schedule, on your terms
• Freelance autonomy with access to meaningful, intellectually stimulating work
• Your security expertise has a direct, measurable impact on how AI handles real-world risk
• Potential for ongoing work and contract extension as projects grow