Vulnerability Management Analyst

Alignerr; Johannesburg; Remote; ZAR 919,000 - 1,723,000; Part time

Job summary

Alignerr is seeking a Vulnerability Management Analyst (AI Training) to join a remote, hourly engagement. You will analyze CVEs, exposure and remediation workflows to train AI models on real-world security reasoning, shaping how AI systems think about risk in production environments.

The role blends hands-on security with AI training, offering flexible hours and the chance to influence how AI systems understand risk.

Qualifications

• 2+ years of experience in vulnerability management, security operations, or infrastructure security.
• Familiar with CVE databases, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, SSVC).
• You understand the gap between theoretical severity and real-world exploitability, and you can communicate it clearly.
• Structured, analytical thinker who can document reasoning in a clear and consistent way.
• Comfortable working independently and asynchronously.

Responsibilities

• Analyze vulnerability reports, CVEs, and real-world exposure scenarios across infrastructure and application environments.
• Classify severity, exploitability, business impact, and appropriate remediation strategies.
• Review and evaluate patching, mitigation, and risk prioritization decision-making scenarios.
• Generate, label, and validate realistic security-reasoning data used to train and benchmark AI systems.
• Apply your practical knowledge of what risk actually matters in production - not just what looks bad on paper.

Skills

Vulnerability management

Security operations

Infrastructure security

CVEs

Communicate risk clearly

Tools

Tenable

Qualys

Rapid7

Job description

Vulnerability Management Analyst (AI Training)

About The Role

We’re partnering with leading AI research labs to build smarter, more capable AI systems - and we need real security practitioners to make it happen. As a Vulnerability Management Analyst, you’ll bring your hands-on experience with CVEs, exposure management, and remediation workflows to help train and evaluate frontier AI models on the kind of security reasoning that actually matters in production environments.

This is a rare opportunity to apply your domain expertise beyond traditional security ops - and directly influence how the next generation of AI thinks about risk.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Fully Remote
• Commitment: 10-40 hours/week

What You’ll Do

• Analyze vulnerability reports, CVEs, and real-world exposure scenarios across infrastructure and application environments
• Classify severity, exploitability, business impact, and appropriate remediation strategies
• Review and evaluate patching, mitigation, and risk prioritization decision-making scenarios
• Generate, label, and validate realistic security-reasoning data used to train and benchmark AI systems
• Apply your practical knowledge of what risk actually matters in production - not just what looks bad on paper

Who You Are

• 2+ years of experience in vulnerability management, security operations, or infrastructure security
• Familiar with CVE databases, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, SSVC)
• You understand the gap between theoretical severity and real-world exploitability - and you know how to communicate it clearly
• Structured, analytical thinker who can document reasoning in a clear and consistent way
• Comfortable working independently and asynchronously

Nice to Have

• Experience with tools like Tenable, Qualys, Rapid7, or similar platforms
• Familiarity with cloud infrastructure security or container vulnerability management
• Background in threat intelligence or red team/blue team operations
• Prior experience contributing to AI training, annotation, or evaluation projects

Why Join Us

• Work directly on frontier AI systems alongside top-tier research teams
• Fully remote and flexible - work on your own schedule
• Freelance autonomy with the backing of a well-connected AI training organization
• Contribute to meaningful work that helps AI reason more accurately about real-world security risk
• Potential for ongoing work and contract extension