Vulnerability Management Analyst

Summary

Alignerr is seeking experienced security professionals to help train and evaluate cutting-edge AI systems with real-world vulnerability management knowledge. The role involves analyzing vulnerability reports, classifying risks, and generating security-reasoning data for AI systems.

Responsibilities

• Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and applications
• Classify severity, impact, exploitability, and appropriate remediation strategies
• Review and evaluate patching, mitigation, and remediation decision-making scenarios
• Generate, label, and validate realistic security-reasoning data used to train and benchmark AI systems
• Apply your real-world judgment to help AI distinguish between theoretical risk and what actually matters in production

Skills

• 2+ years of experience in vulnerability management, security operations, or infrastructure security
• Familiar with CVEs, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, DREAD)
• Comfortable making judgment calls on risk tradeoffs in complex, real-world environments
• A structured, analytical thinker who can communicate reasoning clearly in writing
• Self-motivated and reliable when working independently on asynchronous tasks
• Experience with tools like Tenable, Qualys, Rapid7, or similar platforms
• Background in threat intelligence, red teaming, or cloud security
• Familiarity with compliance frameworks such as NIST, CIS, or SOC 2
• Prior experience contributing to AI training, data labeling, or security research

Qualifications

Must Haves

• 2+ years of experience in vulnerability management, security operations, or infrastructure security
• Familiar with CVEs, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, DREAD)
• Comfortable making judgment calls on risk tradeoffs in complex, real-world environments
• A structured, analytical thinker who can communicate reasoning clearly in writing
• Self-motivated and reliable when working independently on asynchronous tasks

Nice to Haves

• Experience with tools like Tenable, Qualys, Rapid7, or similar platforms
• Background in threat intelligence, red teaming, or cloud security
• Familiarity with compliance frameworks such as NIST, CIS, or SOC 2
• Prior experience contributing to AI training, data labeling, or security research

Benefits

• Fully remote and flexible — work on your own schedule
• Freelance perks: autonomy, variety, and global collaboration
• Potential for ongoing work and contract extension