We are sharing a specialised part-time consulting opportunity for senior cybersecurity professionals with deep expertise in security operations, incident response, vulnerability management, security architecture, and governance, risk, and compliance.
This role supports advanced AI evaluation work focused on realistic enterprise cybersecurity scenarios. Selected experts will design complex security tasks, develop reference outputs, and create evaluation rubrics that reflect how experienced security professionals assess threats, incidents, technical controls, and regulatory requirements.
Key Responsibilities
Security Operations & Threat Detection
-
Develop realistic scenarios involving security operations centre monitoring and threat detection
-
Create tasks based on enterprise security workflows, alerts, investigations, and escalation processes
-
Apply practical knowledge of SIEM platforms such as Splunk, Microsoft Sentinel, or comparable tools
-
Evaluate security reasoning for technical accuracy, completeness, and appropriate prioritisation
-
Identify weaknesses in threat analysis, detection logic, and incident triage
Incident Response & Digital Forensics
-
Design scenarios covering incident investigation, containment, remediation, and recovery
-
Apply established incident-response methodologies and playbooks
-
Develop reference incident reports, findings, and recommended response actions
-
Evaluate AI-generated incident analyses for technical soundness and operational realism
-
Assess reasoning involving digital forensics, attack progression, and root-cause analysis
Vulnerability Management & Security Engineering
-
Create tasks involving vulnerability assessment, penetration testing, remediation, and security architecture
-
Develop scenarios using tools such as Tenable, Qualys, CrowdStrike, or comparable enterprise security platforms
-
Assess technical findings based on exploitability, exposure, business impact, and remediation priority
-
Evaluate security architecture and engineering recommendations
-
Identify generic or incomplete recommendations that fail to reflect real-world security constraints
Governance, Risk & Compliance
-
Develop cybersecurity scenarios involving enterprise risk assessment and compliance programmes
-
Apply relevant frameworks including NIST Cybersecurity Framework, SOC 2, ISO 27001, and the EU NIS2 Directive
-
Produce reference security assessments, risk analyses, and compliance documentation
-
Evaluate whether proposed controls and recommendations appropriately address identified risks
-
Assess security decisions within broader regulatory and business contexts
AI Evaluation & Rubric Development
-
Design expert-level evaluation tasks across cybersecurity workflows
-
Draft reference outputs that demonstrate strong professional security judgement
-
Develop rubrics that distinguish senior-level reasoning from generic or certification-level responses
-
Review AI-generated outputs for technical accuracy, risk awareness, and operational relevance
-
Identify subtle reasoning failures, missing considerations, and unrealistic security recommendations
-
Provide clear written rationale supporting evaluation decisions
Ideal Profile
-
5+ years of professional experience in cybersecurity, security engineering, security operations, incident response, security architecture, or a closely related field
-
Senior-level experience as a Security Engineer, Security Lead, CISO, consultant, or comparable cybersecurity professional
-
Direct ownership of incident-response programmes, security architecture initiatives, vulnerability-management programmes, or compliance projects
-
Strong familiarity with enterprise security tooling, including SIEM, EDR, vulnerability-management, and GRC platforms
-
Practical understanding of threat modelling, incident response, vulnerability management, and cybersecurity risk assessment
-
Experience with one or more frameworks such as NIST CSF, SOC 2, ISO 27001, or NIS2
-
Strong understanding of current cybersecurity threats and enterprise risk considerations
-
Ability to communicate complex security reasoning clearly and precisely in writing
-
CISSP, CISM, or a comparable recognised cybersecurity credential is highly valued
-
Experience developing training materials, evaluation rubrics, security assessments, or technical review frameworks is advantageous
Engagement Details
-
Part-time independent contractor engagement
-
Fully remote
-
Flexible scheduling based on project requirements
-
Compensation: $70–$80/hour
-
Projects may be extended, shortened, or concluded based on project needs and performance
-
Work must be completed without using confidential or proprietary information belonging to any employer, client, institution, or other third party
-
H1-B and STEM OPT support is unavailable for this engagement
About the Platform
This opportunity is available through 24-MAG LLC. We connect experienced professionals with remote consulting opportunities across technical, evaluation, and project-based workstreams.
By submitting this application, you acknowledge that your information may be processed by 24-MAG LLC for recruitment and opportunity matching in accordance with our Privacy Policy: https://www.24-mag.com/privacy-policy.
