Security Operations Analyst

Alignerr Corp.; Cape Town; Remote; ZAR 276,000 - 413,000; Full time

Benefits offered by this job

Fully remote work

Contract-based freelance role

Job summary

Alignerr is seeking a Security Operations Analyst (AI Training) to join a remote, hourly-contract engagement. You bring 2+ years of hands-on SOC experience, familiarity with SIEMs, and proficiency in incident analysis and investigation workflows.

You will help train and evaluate AI models that reason through security incidents, alerts, and investigations. This freelance, asynchronous role offers flexible scheduling, autonomy, and opportunities to influence how AI understands and responds to

Qualifications

• 2+ years of hands-on SOC experience including incident response duties.
• Familiarity with SIEM platforms, alert triage, and investigation workflows.
• Skilled at distinguishing meaningful threat signals from noise and false positives.
• Strong written communicator who can clearly explain analytical reasoning.
• Self-directed and comfortable working asynchronously on task-based assignments.

Responsibilities

• Analyze realistic incident and alert scenarios — identify what's happening, why it matters, and how to respond
• Classify severity levels, determine root causes, and recommend appropriate response actions
• Review detection logic and investigation workflows for accuracy and real-world alignment
• Evaluate AI-generated outputs against how analysts actually triage and respond to threats
• Distinguish true security signals from noise and false positives in AI-generated content
• Provide structured, expert feedback that directly improves AI reasoning in security contexts

Skills

SOC experience

Incident response

SIEM familiarity

Investigation workflows

Threat analysis

Written communication

Independent work

Tools

SIEM platforms

Job description

Security Operations Analyst (AI Training)

We're partnering with the world's leading AI research labs to build the next generation of security-focused AI systems. As a Security Operations Analyst, you'll bring your real-world SOC experience to the frontier - helping train and evaluate AI models that reason through security incidents, alerts, and investigations the way a skilled analyst actually would. This is a unique opportunity to put your expertise to work beyond the SOC, influencing how AI understands and responds to the threat landscape.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10-40 hours/week

What You'll Do

• Analyze realistic incident and alert scenarios — identify what's happening, why it matters, and how to respond
• Classify severity levels, determine root causes, and recommend appropriate response actions
• Review detection logic and investigation workflows for accuracy and real-world alignment
• Evaluate AI-generated outputs against how analysts actually triage and respond to threats
• Distinguish true security signals from noise and false positives in AI-generated content
• Provide structured, expert feedback that directly improves AI reasoning in security contexts

Who You Are

• 2+ years of hands-on experience in SOC, incident response, or security operations
• Familiar with SIEM platforms, alert triage, and investigation workflows
• Skilled at separating meaningful threat signals from background noise and false positives
• Strong written communicator who can clearly explain analytical reasoning
• Self-directed and comfortable working asynchronously on task-based assignments

Nice to Have

• Experience with threat hunting, detection engineering, or purple team exercises
• Familiarity with frameworks like MITRE ATT&CK, the Cyber Kill Chain, or NIST IR
• Background in cloud security, endpoint detection, or network forensics

Why Join Us

• Work directly on cutting-edge AI systems built for real-world security environments
• Fully remote and flexible - work on your own schedule
• Freelance perks: autonomy, variety, and collaboration with a global expert community
• Make a lasting impact on how AI understands and responds to cybersecurity threats
• Potential for ongoing work and contract extension