Cybersecurity Practitioner: Paid Expert Interviews (SOC, Incident Response, Detection, AppSec)

Remolity, Inc.; Northern (KY); Hybrid; USD 83,000 - 165,000; Part time

Job summary

Mercor is designing a benchmark to measure how well AI agents perform real enterprise cyber defense tasks. This is a short paid research engagement involving two to three one-hour video conversations over roughly four weeks, scheduled around your availability.

You will join discussions about the tools you use, how your team measures triage, response, detection rules, and where AI can assist today or hinder work. The role is remote within the United States and paid hourly as a spot bonus.

Qualifications

• Hands-on practitioners in enterprise security (SOC, IR, detection, AppSec) preferred.
• Experience with EDR and SIEM stacks (CrowdStrike, Defender, Sentinel, Splunk, Elastic, etc.) is a plus.
• Independent contractor with ability to participate remotely.

Responsibilities

• Participate in 2–3 one-hour video interviews over ~4 weeks; no deliverables required.
• Share insights on tools, workflows, and AI-enabled defense challenges.
• Discuss how AI assists or hinders your defense tasks.

Skills

SOC analyst

Incident response

Detection engineer

AppSec

Threat hunter

EDR/SIEM

Tools

CrowdStrike Falcon

Microsoft Defender

Sentinel

Splunk

Job description

Cybersecurity Practitioner: Paid Expert Interviews (SOC, Incident Response, Detection, AppSec)

Remote — United States

Special Referral gives your application an enhanced referral route, helping it stand out and potentially improving your chances of being considered.

About the role

Mercor is designing a benchmark that measures how well AI agents do real enterprise cyber defense work. Before we build it, we want to hear from people who do that work every day.

This is a short paid research engagement, not a task or data project. You will join two to three one-hour video conversations with the Mercor team over roughly four weeks, scheduled around your availability.

Scope of Work

• How your work actually happens: the tools you live in, what lands in your queue, where judgment matters and where it does not.
• How your team measures whether a triage, investigation, containment, hunt, detection rule or patch was done well.
• Where AI assistance helps you today, where it gets in the way, and what would make a benchmark of AI on this work credible to you.
• Our draft task taxonomy: what is missing, what is mislabeled, what you would weight differently.

What you’ll bring

• Current or recent hands‑on practitioners in enterprise security, for example:
• SOC analysts and SOC leads (tier 2 and above)
• Incident responders and digital forensics investigators
• Detection engineers and threat hunters
• Application security or product security engineers who find and fix vulnerabilities in production code
• Security engineers who have run or been on the receiving end of a red team engagement
• Experience with an EDR and SIEM stack (CrowdStrike Falcon, Microsoft Defender and Sentinel, Splunk, SentinelOne, Elastic or similar) is a plus. Security leaders are welcome if you are still close to the work.

Not provided in the source listing.

Schedule and availability

Two to three one-hour video conversations over roughly four weeks; no preparation or deliverables required. Hourly interview pay is issued as a spot bonus.

Contract & Payment Terms

• Pay and time
• Paid hourly for interview time as a spot bonus. Sessions are one hour; no prep is expected.
• Two to three sessions in total. Nothing to build, label or submit.
• Remote, US-based.
• Confidentiality
• We will ask you to describe patterns, not specific incidents, and to leave out anything confidential about current or former employers or customers. Your input is used only to design the benchmark and is never attributed to you or your employer.
• We consider all qualified applicants without regard to legally protected characteristics and provide reasonable accommodations upon request.
• You will be engaged as an independent contractor.
• This is a fully remote role that can be completed on your own schedule.
• Projects can be extended, shortened, or concluded early depending on needs and performance.
• Your work at Mercor will not involve access to confidential or proprietary information from any employer, client, or institution.
• Payments are weekly on Stripe or Wise based on services rendered.
• Please note: We are unable to support H1-B or STEM OPT candidates at this time.

Where you can work

This role is open to people based in: United States.

Remote does not always mean work from any country. Always check the employer’s location and working‑hour requirements.