Cyber Threat Intelligence SME

Confidential; United States; Remote; USD 83,000 - 165,000; Full time

Job summary

Zekai is seeking a Cyber Threat Intelligence SME on a 100% remote contractor basis. You will contribute to evaluating and mapping advanced cyber threat scenarios to train AI systems, applying domain knowledge to ensure accurate, real-world input.

You will map CTI cases, author boundary cases, and assess threat responses with attention to source reliability and analytic reasoning, while mentoring others and contributing to ongoing AI evaluation efforts.

Qualifications

• Substantial experience in cyber threat intelligence.
• Expertise in distinguishing legitimate defensive/analytic activities from offensive or surveillance-focused requests.
• Background in threat-actor attribution, APT tracking, or exposure to adversary tactics.

Responsibilities

• Map cyber threat intelligence cases to established taxonomies.
• Author boundary cases illustrating prohibited surveillance, attribution and intrusion-adjacent requests.
• Evaluate and grade submitted threat responses with emphasis on source reliability, analytic reasoning, and actionable utility.
• Identify and flag instances of over-refusal to ensure legitimate threat analysis is not declined.
• Document and clarify edge cases involving nation-state operations and advanced threats.
• Provide concise written and verbal feedback to support AI threat assessment capabilities.

Skills

Cyber threat intel

Threat attribution

APT tracking

English communication

Mentoring

AI system evaluation

Job description

Role Title: Cyber Threat Intelligence SME

Role Type: Contractor

Location: Remote

our partner is engaging Cyber Threat Intelligence SMEs to contribute to a leading-edge customer project focused on evaluating and mapping advanced cyber threat scenarios. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.

Scope of Work

• Map cyber threat intelligence (CTI) cases to established taxonomies, especially within the surveillance and privacy evaluation domains.
• Author boundary cases illustrating prohibited surveillance, attribution, and intrusion-adjacent requests, helping delineate permissible and impermissible actions.
• Evaluate and grade submitted threat responses with special attention to source reliability, analytic reasoning, stated limitations, and actionable utility.
• Identify and flag instances of over-refusal, ensuring legitimate threat analysis is not unnecessarily declined.
• Document and clarify challenging edge cases involving nation-state operations and other advanced threats.
• Provide concise written and verbal feedback to support the continuous improvement of AI threat assessment capabilities.

Preferred Qualifications

• Substantial experience in cyber threat intelligence, particularly where nation-state operations intersect with advanced cyber threats.
• Expertise in distinguishing between legitimate defensive/analytic activities and impermissible offensive or surveillance-focused requests.
• Background in threat-actor attribution, APT tracking, or exposure to adversary tactics and techniques.
• Demonstrated proficiency in authoring clear, structured written content in English and communicating complex concepts verbally.
• Experience mentoring, teaching, or leading professionals in threat intelligence disciplines.
• Prior participation in AI system evaluation, red-teaming, or related quality assurance projects is a plus.

This is a 100% remote contract role, open to applicants worldwide in the countries the employer accepts.