Remote | Security Onion Specialist — $90–$175/hour

24-MAG; United States; Remote; USD 124,000 - 241,000; Full time

Benefits offered by this job

Fully remote

Job summary

24-MAG is seeking experienced Security Onion professionals to complete advanced cybersecurity workflows, investigate alerts, and document processes for an AI evaluation project. You will create prompts, rubrics, and comprehensive workflow documentation while recording screen-based demonstrations.

This fully remote contractor role emphasizes clear technical communication and independent work. Ideal candidates have hands-on Security Onion experience, strong monitoring, threat detection, and

Qualifications

• Hands-on experience with Security Onion.
• Background in security monitoring and threat detection.
• Experience investigating alerts and potential security incidents.
• Strong network-traffic and log-analysis capabilities.
• Ability to document investigation steps and technical reasoning.

Responsibilities

• Complete cybersecurity workflows within Security Onion.
• Investigate alerts and security events.
• Analyse network traffic and security telemetry.
• Review logs and contextual information for suspicious activity.
• Record screen demonstrations of investigation steps.
• Develop realistic prompts and rubrics from workflows.
• Provide structured feedback on outputs and quality.

Skills

Security Onion

Security monitoring

Threat detection

Alert investigation

Log analysis

Network traffic analysis

Incident-response

Technical communication

Independent remote work

Screen recording

Tools

Security Onion

Job description

We are sharing a specialised consulting opportunity for experienced Security Onion professionals with hands-on expertise in security monitoring, threat detection, alert investigation, log analysis, network traffic analysis, and incident-response workflows to contribute to an advanced cybersecurity and AI evaluation project.

Selected professionals will complete realistic workflows within Security Onion, investigate security events, document technical processes, create evaluation prompts and rubrics, and review task outputs for accuracy. The role combines practical cybersecurity execution with clear technical communication and documentation. No prior AI experience is required.

Key Responsibilities

Security Monitoring & Investigation

• Complete assigned cybersecurity workflows directly within Security Onion
• Investigate alerts generated through security-monitoring environments
• Analyse network traffic and related security telemetry
• Review logs and contextual information relevant to suspicious activity
• Apply practical incident-investigation judgement throughout assigned tasks

Threat Detection & Incident Analysis

• Use Security Onion capabilities to identify and assess potential threats
• Interpret alerts within the context of broader network activity
• Investigate indicators associated with possible security incidents
• Analyse available security data to support accurate conclusions
• Document investigative reasoning and relevant findings clearly

Workflow Execution & Screen Recording

• Navigate Security Onion independently while completing assigned workflows
• Record the screen while demonstrating required investigation steps
• Show how relevant tools and features are used during each workflow
• Follow task instructions accurately from beginning to completion
• Produce recordings that clearly demonstrate the technical process performed

Prompt, Rubric & Documentation Development

• Create realistic prompts based on completed cybersecurity workflows
• Develop detailed rubrics for assessing task quality and correctness
• Document investigation steps in a clear and reproducible format
• Explain Security Onion tools, features, and investigation techniques used
• Translate practical security workflows into structured evaluation materials

Output Review & Quality Evaluation

• Review completed task outputs for technical accuracy
• Evaluate whether results align with project instructions and quality standards
• Identify incomplete, incorrect, or inconsistent security-analysis outputs
• Provide structured feedback where improvements are required
• Maintain consistent quality while working independently in a remote environment

Ideal Profile

• Strong hands-on experience using Security Onion
• Practical background in security monitoring and threat detection
• Experience investigating alerts and potential security incidents
• Strong network-traffic and log-analysis capabilities
• Comfortable navigating Security Onion independently
• Current access to Security Onion and ability to use the application without assistance
• Comfortable recording and sharing screen-based workflow demonstrations
• Strong attention to detail across technical investigation tasks
• Ability to explain cybersecurity workflows clearly and concisely
• Experience documenting tools, investigation steps, and analytical reasoning
• Prior human-data experience such as annotation, labelling, RLHF, AI-response evaluation, or model evaluation is advantageous
• Ability to work independently while following detailed project instructions
• Strong written technical communication skills
• No prior AI-training or model-evaluation experience is required

Engagement Details

• Independent contractor engagement
• Fully remote
• Compensation: $90--$175/hour
• Work will involve Security Onion workflows, network monitoring, alert investigation, log analysis, threat detection, and incident-response activities
• Screen recording is required while completing assigned technical workflows
• Assignments may include creation of prompts, rubrics, workflow documentation, and technical evaluation materials
• Strong practical familiarity with Security Onion is central to this engagement
• Current access to Security Onion is preferred for independent completion of project tasks
• Project scope, assigned workflows, investigation scenarios, and quality standards may evolve depending on project needs
• Work must be completed without using confidential or proprietary information belonging to any employer, client, institution, organisation, or other third party

About the Platform

This opportunity is available through 24-MAG LLC. We connect experienced professionals with remote consulting opportunities across technical, evaluation, and project-based workstreams.

By submitting this application, you acknowledge that your information may be processed by 24-MAG LLC for recruitment and opportunity matching in accordance with our Privacy Policy: https://www.24-mag.com/privacy-policy