Vulnerability Management Analyst

Alignerr Corp.; Johannesburg; Remote; ZAR 917,000 - 1,605,000; Part time

Job summary

Alignerr seeks a Vulnerability Management Analyst (AI Training) to join a fully remote hourly contract. You will analyze CVEs, exposure scenarios, and remediation workflows to support training frontier AI models in production environments.

You will collaborate asynchronously, communicate risk clearly, and prioritize security decisions that matter in real-world deployments. This role offers 10–40 hours per week with potential extension and values experience with CVSS/EPSS.

Qualifications

• 2+ years of experience in vulnerability management, security operations, or infrastructure security.
• Familiar with CVE databases, vulnerability scanners, patching workflows, and risk prioritization frameworks.
• Able to communicate severity and risk clearly and document reasoning.
• Independent and asynchronous worker.

Responsibilities

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and application environments.
• Classify severity, exploitability, business impact, and remediation strategies.
• Review and evaluate patching, mitigation, and risk prioritization decision‑making scenarios.
• Generate, label, and validate security‑reasoning data used to train and benchmark AI systems.
• Apply your practical knowledge of what risk actually matters in production — not just what looks bad on paper.

Skills

Vulnerability management

Security operations

CVE databases

Vulnerability scanners

Risk prioritization (CVSS/EPSS/SSVC)

Tools

Tenable

Qualys

Rapid7

Job description

Vulnerability Management Analyst (AI Training)

About The Role

We're partnering with leading AI research labs to build smarter, more capable AI systems — and we need real security practitioners to make it happen. As a Vulnerability Management Analyst, you'll bring your hands‑on experience with CVEs, exposure management, and remediation workflows to help train and evaluate frontier AI models on the kind of security reasoning that actually matters in production environments.

This is a rare opportunity to apply your domain expertise beyond traditional security ops — and directly influence how the next generation of AI thinks about risk.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Fully Remote
• Commitment: 10–40 hours/week

What You'll Do

• Analyze vulnerability reports, CVEs, and real-world exposure scenarios across infrastructure and application environments
• Classify severity, exploitability, business impact, and appropriate remediation strategies
• Review and evaluate patching, mitigation, and risk prioritization decision‑making scenarios
• Generate, label, and validate realistic security‑reasoning data used to train and benchmark AI systems
• Apply your practical knowledge of what risk actually matters in production — not just what looks bad on paper

Who You Are

• 2+ years of experience in vulnerability management, security operations, or infrastructure security
• Familiar with CVE databases, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, SSVC)
• You understand the gap between theoretical severity and real‑world exploitability — and you know how to communicate it clearly
• Structured, analytical thinker who can document reasoning in a clear and consistent way
• Comfortable working independently and asynchronously

Nice to Have

• Experience with tools like Tenable, Qualys, Rapid7, or similar platforms
• Familiarity with cloud infrastructure security or container vulnerability management
• Background in threat intelligence or red team/blue team operations
• Prior experience contributing to AI training, annotation, or evaluation projects

Why Join Us

• Work directly on frontier AI systems alongside top‑tier research teams
• Fully remote and flexible — work on your own schedule
• Freelance autonomy with the backing of a well‑connected AI training organization
• Contribute to meaningful work that helps AI reason more accurately about real‑world security risk
• Potential for ongoing work and contract extension