Cybersecurity Practitioner
About the role
This is a short paid research engagement, not a task or data project. The candidate will join two to three one‑hour video conversations with the team over roughly four weeks, scheduled around the candidate's availability.
Responsibilities
- Discuss how your work actually happens: the tools you live in, what lands in your queue, where judgment matters and where it does not.
- Discuss how your team measures whether a triage, investigation, containment, hunt, detection rule or patch was done well.
- Discuss where AI assistance helps you today, where it gets in the way, and what would make a benchmark of AI on this work credible to you.
- Review our draft task taxonomy: what is missing, what is mislabeled, what you would weight differently.
Requirements
Current or recent hands‑on practitioners in enterprise security, for example:
- SOC analysts and SOC leads (tier 2 and above)
- Incident responders and digital forensics investigators
- Detection engineers and threat hunters
- Application security or product security engineers who find and fix vulnerabilities in production code
- Security engineers who have run or been on the receiving end of a red team engagement
Qualifications
Experience with an EDR and SIEM stack (CrowdStrike Falcon, Microsoft Defender and Sentinel, Splunk, SentinelOne, Elastic or similar) is a plus. Security leaders are welcome if you are still close to the work.
Skills
Hands‑on experience with security tools and processes; ability to articulate workflow and judgment in SOC, incident response, detection, hunting, or application security contexts.
Pay
$125–$175 per hour, paid for interview time as a spot bonus.
Schedule
Two to three one‑hour video sessions over roughly four weeks, scheduled around your availability. No preparation required. Remote, US‑based.