Remote Cybersecurity Architect - Threat Detection & IR Lead

mercor; United States; Remote; USD 110,000 - 124,000; Part time

Job summary

Mercor is seeking a Cybersecurity Expert for a remote-contract role. You will craft cybersecurity scenarios across SOC operations, IR and forensics, and risk governance, leveraging Splunk, CrowdStrike and vulnerability scanners.

You will shape incident reports, architecture designs, and compliance artifacts for US and international standards. The role requires 5+ years in security leadership or engineering, direct IR/ architecture ownership, and strong tooling and regulatory knowledge.

Qualifications

• 5+ years as a security engineer or CISO at a major company or security firm.
• Direct ownership of incident response programs, security architecture, or compliance initiatives.
• Fluency in security tooling plus understanding of regulatory frameworks and threat landscape.
• A recognized professional credential is strongly preferred (CISSP, CISM) or international equivalent.

Responsibilities

• Construct cybersecurity scenarios spanning SOC monitoring, incident response and forensics, vulnerability management and security architecture design.
• Build tasks across security operations and threat detection, incident response and digital forensics, vulnerability and penetration testing, governance/ risk/compliance.
• Develop scenarios involving tools such as SIEM platforms (Splunk, Microsoft Sentinel), EDR tools (CrowdStrike), vulnerability scanners (Tenable, Qualys), and GRC platforms.
• Apply cybersecurity methodologies (threat modeling, incident response playbooks, risk assessment) to standards (NIST CSF, SOC 2, ISO 27001, NIS2).
• Produce reference incident reports, security assessments, architecture designs, and compliance documentation.

Skills

Security tooling

Regulatory familiarity

Tools

Splunk

Microsoft Sentinel

CrowdStrike

Tenable

Qualys

Job description

Mercor is seeking a Cybersecurity Expert for a remote-contract role. You will craft cybersecurity scenarios across SOC operations, IR and forensics, and risk governance, leveraging Splunk, CrowdStrike and vulnerability scanners.

You will shape incident reports, architecture designs, and compliance artifacts for US and international standards. The role requires 5+ years in security leadership or engineering, direct IR/ architecture ownership, and strong tooling and regulatory knowledge.