Remote Penetration Tester (Contract) – Cybersecurity Evaluation

United States Digital Space LLC; United States; Remote; USD 2,411,000 - 2,962,000; Full time

Job summary

Mercor is seeking a Cybersecurity Expert for remote contract work. You will review AI-generated outputs for threat analysis, create realistic cybersecurity scenarios, and annotate data across CVE classification and SIEM triage. You will provide structured feedback on frameworks like NIST CSF and MITRE ATT&CK.

Ideal candidates have 3+ years in enterprise cybersecurity, SOC/DFIR, and strong written communication. Certifications such as CISSP/CISM/CEH/OSCP are preferred.

Qualifications

• 3+ years of professional cybersecurity experience in enterprise, MSSP, consultancy or government/defense.
• Background in SOC analysis, incident response (DFIR), penetration testing, threat intelligence or security architecture.
• Strong analytical thinking and clear written communication.

Responsibilities

• Review and evaluate AI-generated outputs related to threat analysis, vulnerability assessment, and security architecture recommendations.
• Create realistic scenarios based on cybersecurity workflows such as incident response runbooks, threat hunting queries, and penetration testing reports.
• Annotate, label, and validate data across cybersecurity use cases like CVE classification accuracy and SIEM alert triage.
• Provide structured feedback on AI accuracy in areas such as cybersecurity frameworks (NIST CSF, MITRE ATT&CK) and threat intelligence standards (STIX/TAXII).
• Collaborate asynchronously with research teams to refine evaluation frameworks for cybersecurity AI.

Skills

SOC analysis

Incident response

Penetration testing

Threat intelligence

Security architecture

Analytical thinking

Written communication

Education

CISSP, CISM, CEH, OSCP, GIAC, Security+

Job description

Mercor is seeking a Cybersecurity Expert for remote contract work. You will review AI-generated outputs for threat analysis, create realistic cybersecurity scenarios, and annotate data across CVE classification and SIEM triage. You will provide structured feedback on frameworks like NIST CSF and MITRE ATT&CK.

Ideal candidates have 3+ years in enterprise cybersecurity, SOC/DFIR, and strong written communication. Certifications such as CISSP/CISM/CEH/OSCP are preferred.