Vulnerability Management Analyst

Alignerr Corp.; España; Remote; EUR 55,000 - 83,000; Part time

Job summary

Alignerr is seeking a Vulnerability Management Analyst (AI Training) to help train and evaluate cutting-edge AI systems in security contexts. You will apply your real-world knowledge of how security teams discover, prioritize, and remediate risk to shape how AI reasons about cybersecurity.

This remote, hourly contract role fits around your schedule, with 10–40 hours per week. You will work on vulnerability data, CVEs, and exposure scenarios across infrastructure and applications to improve

Qualifications

• 2+ years of hands-on experience in vulnerability management, security operations, or infrastructure security.
• Solid working knowledge of CVEs, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, SSVC).
• Ability to articulate security reasoning in writing and work independently on asynchronous tasks.

Responsibilities

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and application environments
• Classify severity, exploitability, and business impact using industry-standard frameworks
• Evaluate patching, mitigation, and remediation decision-making scenarios for real-world accuracy
• Generate, label, and validate security-reasoning data used to train and benchmark AI models
• Provide structured, expert feedback that helps AI systems think like experienced security practitioners

Skills

Vulnerability management

Security operations

Infrastructure security

Analytical thinking

Asynchronous work

Tools

Tenable

Qualys

Rapid7

Job description

Vulnerability Management Analyst (AI Training)

We're looking for experienced vulnerability management and security operations professionals to help train and evaluate cutting-edge AI systems. Your real-world knowledge of how security teams discover, prioritize, and remediate risk will directly shape how AI reasons about cybersecurity — making a meaningful impact on the future of intelligent security tooling.

This is a remote, task-based contract role that fits around your existing schedule. Whether you're a full-time security professional or a seasoned freelancer, this is your opportunity to apply deep domain expertise to one of the most exciting challenges in technology.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10–40 hours/week

What You'll Do

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and application environments
• Classify severity, exploitability, and business impact using industry-standard frameworks
• Evaluate patching, mitigation, and remediation decision-making scenarios for real-world accuracy
• Generate, label, and validate security-reasoning data used to train and benchmark AI models
• Provide structured, expert feedback that helps AI systems think like experienced security practitioners

Who You Are

• 2+ years of hands-on experience in vulnerability management, security operations, or infrastructure security
• Solid working knowledge of CVEs, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, SSVC)
• You understand the gap between theoretical risk scores and what actually matters in production environments
• Clear, structured, and analytical communicator — comfortable articulating security reasoning in writing
• Self-motivated and able to work independently on asynchronous task-based assignments

Nice to Have

• Experience with exposure management platforms (e.g., Tenable, Qualys, Rapid7)
• Background in threat intelligence, red teaming, or security engineering
• Familiarity with AI, data labeling, or model evaluation workflows
• Industry certifications such as CEH, CISSP, CompTIA Security+, or equivalent

Why Join Us

• Work on frontier AI systems alongside the world's leading research labs
• Fully remote and flexible — complete tasks on your own schedule
• Freelance autonomy with meaningful, intellectually engaging work
• Contribute to AI that could reshape how security teams operate at scale
• Potential for ongoing work and contract extension