Remote | Senior Cybersecurity Expert — $70–$80/hour

24-Mag•New York, NY

12h•Remote

About The Position

We are sharing a specialised part-time consulting opportunity for senior cybersecurity professionals with deep expertise in security operations, incident response, vulnerability management, security architecture, and governance, risk, and compliance. This role supports advanced AI evaluation work focused on realistic enterprise cybersecurity scenarios. Selected experts will design complex security tasks, develop reference outputs, and create evaluation rubrics that reflect how experienced security professionals assess threats, incidents, technical controls, and regulatory requirements.

Requirements

5+ years of professional experience in cybersecurity, security engineering, security operations, incident response, security architecture, or a closely related field
Senior-level experience as a Security Engineer, Security Lead, CISO, consultant, or comparable cybersecurity professional
Direct ownership of incident-response programmes, security architecture initiatives, vulnerability-management programmes, or compliance projects
Strong familiarity with enterprise security tooling, including SIEM, EDR, vulnerability-management, and GRC platforms
Practical understanding of threat modelling, incident response, vulnerability management, and cybersecurity risk assessment
Experience with one or more frameworks such as NIST CSF, SOC 2, ISO 27001, or NIS2
Strong understanding of current cybersecurity threats and enterprise risk considerations
Ability to communicate complex security reasoning clearly and precisely in writing

Nice To Haves

CISSP, CISM, or a comparable recognised cybersecurity credential is highly valued
Experience developing training materials, evaluation rubrics, security assessments, or technical review frameworks is advantageous

Responsibilities

Develop realistic scenarios involving security operations centre monitoring and threat detection
Create tasks based on enterprise security workflows, alerts, investigations, and escalation processes
Apply practical knowledge of SIEM platforms such as Splunk, Microsoft Sentinel, or comparable tools
Evaluate security reasoning for technical accuracy, completeness, and appropriate prioritisation
Identify weaknesses in threat analysis, detection logic, and incident triage
Design scenarios covering incident investigation, containment, remediation, and recovery
Apply established incident-response methodologies and playbooks
Develop reference incident reports, findings, and recommended response actions
Evaluate AI-generated incident analyses for technical soundness and operational realism
Assess reasoning involving digital forensics, attack progression, and root-cause analysis
Create tasks involving vulnerability assessment, penetration testing, remediation, and security architecture
Develop scenarios using tools such as Tenable, Qualys, CrowdStrike, or comparable enterprise security platforms
Assess technical findings based on exploitability, exposure, business impact, and remediation priority
Evaluate security architecture and engineering recommendations
Identify generic or incomplete recommendations that fail to reflect real-world security constraints
Develop cybersecurity scenarios involving enterprise risk assessment and compliance programmes
Apply relevant frameworks including NIST Cybersecurity Framework, SOC 2, ISO 27001, and the EU NIS2 Directive
Produce reference security assessments, risk analyses, and compliance documentation
Evaluate whether proposed controls and recommendations appropriately address identified risks
Assess security decisions within broader regulatory and business contexts
Design expert-level evaluation tasks across cybersecurity workflows
Draft reference outputs that demonstrate strong professional security judgement
Develop rubrics that distinguish senior-level reasoning from generic or certification-level responses
Review AI-generated outputs for technical accuracy, risk awareness, and operational relevance
Identify subtle reasoning failures, missing considerations, and unrealistic security recommendations
Provide clear written rationale supporting evaluation decisions