Information Security Analyst Expert

Security analysts to build the detection and incident response scenarios frontier AI labs use to test model judgment.

AfterQuery builds the expert evaluation data that frontier AI labs use to measure and improve their models. We're hiring information security analysts as contractors to author and grade the detection and incident response scenarios those evaluations run on.

What you'll actually do

• Author realistic security scenarios, from alert triage through incident response and remediation
• Write reference answers with the investigative reasoning behind each decision
• Grade model output for technical accuracy and operational soundness
• Flag guidance that reads plausible but would weaken security posture

Who this is for

• Analysts with at least 2 years in security operations, incident response, or vulnerability management
• Practitioners with hands on experience across tooling such as SIEM, EDR, and vulnerability scanners
• Analysts with depth in at least one area such as detection engineering, threat hunting, or GRC
• Clear writers who can document the reasoning behind an investigative decision

Contract and pay

• $90 to $135/hr, paid weekly via Stripe. Your rate is set from your experience, not negotiated down after you start.
• Fully remote, fully async. No fixed hours.
• Minimum 10 hours per week, no maximum. Scale up or down week to week.
• No screen recording, no keystroke monitoring, no idle timers.
• Independent contractor. Ongoing project work rather than single task batches.

How our hiring process works

• Apply at /apply/information-security-analyst-expert. About five minutes. Resume plus a few structured questions.
• Resume review. Every application gets read against a published rubric and gets a decision.
• Written assessment. You may be asked to take a written assessment for further placement.
• Onboarding. Sign the contractor agreement, connect Stripe, and get platform access.
• Project match. You're matched to live work in your specialty, usually within a week of onboarding. About AfterQuery

AfterQuery is an expert data lab. We build the evaluation and training data that frontier AI labs use to measure what their models can and can't do in real professional work. Our contributors are practicing professionals, not annotators, and the work is credited, reviewed, and paid at professional rates.

What you'll do

• Author realistic security scenarios from alert triage through incident response and remediation
• Write reference answers with the investigative reasoning behind each decision
• Grade model output for technical accuracy and operational soundness
• Flag guidance that reads plausible but would weaken security posture

Requirements

• 2+ years of professional security operations, incident response, or vulnerability management experience
• Hands on experience with security tooling such as SIEM, EDR, and vulnerability scanners
• Depth in at least one area such as detection engineering, threat hunting, or GRC
• Clear written English for documenting investigative and remediation reasoning
• Able to commit at least 10 hours per week

Nice to have

• Certifications such as Security+, CySA+, CISSP, or GIAC
• SOC leadership or incident commander experience
• Scripting or automation experience with Python or PowerShell