Vulnerability Management Analyst

We partner with the world's leading AI research teams and labs to build and train cutting-edge AI models. Now, we're looking for experienced security practitioners to bring real-world vulnerability management expertise into the AI development process. This is a unique opportunity to apply what you already know — CVEs, exposure analysis, risk prioritization, remediation workflows — and directly shape how AI systems reason about cybersecurity.

Responsibilities

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and applications
• Classify severity, impact, exploitability, and appropriate remediation strategies
• Review and evaluate patching, mitigation, and remediation decision-making scenarios
• Generate, label, and validate realistic security-reasoning data used to train and evaluate AI systems
• Apply your real-world judgment to distinguish between theoretical risk and what actually matters in production environments

Requirements

• 2+ years of experience in vulnerability management, security operations, or infrastructure security
• Familiar with CVEs, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, SSVC)
• Understands the practical tradeoffs between theoretical risk and operational impact
• A clear, structured, and analytical thinker who communicates findings effectively
• Self-motivated and comfortable working independently on task-based assignments

Skills

• Experience with tools like Tenable, Qualys, Rapid7, or similar scanners
• Background in cloud security, container security, or application security
• Familiarity with frameworks like NIST, CIS, or MITRE ATT&CK
• Prior experience working with AI platforms or data labeling workflows

Benefits

• Work directly on frontier AI systems alongside top research labs
• Fully remote and flexible — work on your own schedule
• Freelance perks: autonomy, variety, and global collaboration
• Contribute to meaningful work that advances AI's understanding of real-world security
• Potential for ongoing work and contract extension

Schedule

10–40 hours/week

Organization: Alignerr
Type: Hourly Contract
Location: Remote