Incident Response Analyst - Fully Remote | Up to $175/hr

mercor; United States; Remote; USD 172,000 - 241,000; Part time

Job summary

Mercor is recruiting for a Cybersecurity Practitioner to conduct paid expert interviews (SOC, incident response, detection, AppSec). This remote contract opportunity pays $125–$175/hour.

Participants will join two to three one-hour video conversations over four weeks, discuss enterprise cyber defense tools and workflows, and help benchmark AI performance in security operations.

Qualifications

• Must-Have: Experience as a SOC analyst, incident responder, or digital forensics investigator.
• Familiarity with EDR and SIEM stacks like CrowdStrike Falcon, Microsoft Defender, Sentinel, Splunk, or Elastic.

Responsibilities

• Participate in two to three one-hour video conversations over four weeks.
• Discuss the tools and processes used in enterprise cyber defense work.
• Evaluate AI assistance in current workflows and suggest improvements.
• Provide feedback on task taxonomy for AI benchmarking.
• Share insights on measuring effectiveness in triage, investigation, and containment.

Skills

SOC operations

Incident response

Digital forensics

Tools

CrowdStrike Falcon

Microsoft Defender

Microsoft Sentinel

Splunk

Elastic Stack

Job description

Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark , General Catalyst , Peter Thiel , Adam D'Angelo , Larry Summers , and Jack Dorsey .

Position

• Cybersecurity Practitioner: Paid Expert Interviews (SOC, Incident Response, Detection, AppSec)
• Type: Contract
• Compensation: $125–$175/hour
• Location: Remote

Role Responsibilities

• Participate in two to three one-hour video conversations over four weeks.
• Discuss the tools and processes used in enterprise cyber defense work.
• Evaluate AI assistance in current workflows and suggest improvements.
• Provide feedback on task taxonomy for AI benchmarking.
• Share insights on measuring effectiveness in triage, investigation, and containment.

Qualifications

• Must-Have: Experience as a SOC analyst, incident responder, or digital forensics investigator.
• Must-Have: Familiarity with EDR and SIEM stacks like CrowdStrike Falcon , Microsoft Defender , Sentinel , Splunk , or Elastic .
• Preferred: Security leaders with hands-on experience in enterprise security.

Compensation & Legal

• Paid hourly for interview time as a spot bonus.

Resources & Support

• For details about the interview process and platform information, please check:
• For any help or support, reach out to:
• Originally posted on Himalayas