Vulnerability Management Analyst

Job summary

Analyze vulnerability reports, CVEs, and exposure scenarios, assessing severity, exploitability, business impact, and remediation options. Create, label, and validate security-reasoning data and evaluate risk and patching decisions to train and benchmark AI systems.

Job details

Vulnerability Management Analyst (AI Training) About The Role We're partnering with leading AI research labs to build smarter, more accurate AI systems — and we need experienced security practitioners to help make it happen. As a Vulnerability Management Analyst, you'll bring your real-world knowledge of CVEs, exposure management, and remediation workflows to help train and evaluate frontier AI models. This isn't a typical security role. Your expertise becomes the foundation for how AI reasons about risk — and your fingerprints will be on some of the most advanced AI systems being built today. Organization: Alignerr Type: Hourly Contract Location: Remote Commitment: 10–40 hours/week What You'll Do Analyze vulnerability reports, CVEs, and exposure scenarios across infrastructure and application environments Classify severity, exploitability, business impact, and appropriate remediation strategies Review and evaluate patching, mitigation, and risk prioritization decision-making scenarios Generate, label, and validate realistic security-reasoning data used to train and benchmark AI systems Help AI understand the nuanced tradeoffs between theoretical risk and what actually matters in production Who You Are 2+ years of hands-on experience in vulnerability management, security operations, or infrastructure security Solid familiarity with CVEs, vulnerability scanners, patching workflows, and risk prioritization frameworks (e.g., CVSS, EPSS, SSVC) You understand the gap between what a scanner flags and what actually warrants urgent action Analytical and structured in your thinking — you can clearly explain your reasoning Self-motivated and comfortable working independently on async, task-based assignments Nice to Have Experience with exposure management platforms (e.g., Tenable, Qualys, Rapid7, Wiz) Background in threat intelligence, red teaming, or incident response Familiarity with AI evaluation or data labeling workflows Why Join Us Work directly on cutting-edge AI projects with top-tier research labs Fully remote and flexible — work on your own schedule, on your own terms Freelance perks: autonomy, variety, and collaboration with a global network of experts Make a meaningful impact — your security knowledge directly shapes how AI understands and reasons about real-world risk Potential for ongoing work and contract extension

What you’ll do

Analyze vulnerability reports, CVEs, and exposure scenarios, assessing severity, exploitability, business impact, and remediation options. Create, label, and validate security-reasoning data and evaluate risk and patching decisions to train and benchmark AI systems.

Requirements

Requires at least two years of hands-on experience in vulnerability management, security operations, or infrastructure security, along with familiarity with CVEs, scanners, patching workflows, and risk prioritization frameworks such as CVSS, EPSS, or SSVC. Candidates should be analytical, able to explain their reasoning clearly, and comfortable working independently on asynchronous assignments.

Benefits

• Flexible Schedule
• Remote Work
• Autonomy
• Varied Work
• Collaboration With a Global Network
• Potential for Ongoing Work and Contract Extension

Listed skills

• Évaluation · Preferred
• Production · Preferred
• Analytical · Preferred
• Organization · Preferred
• Training · Preferred
• Collaboration · Preferred
• Attention to detail · Preferred
• management · Preferred
• Decision Making · Preferred
• Prioritization · Preferred
• Flexible · Preferred
• Labeling · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Vulnerability Management
• Security Operations
• Infrastructure Security
• CVE Analysis
• Exposure Management
• Vulnerability Scanning
• Patch Management
• Risk Prioritization
• CVSS
• EPSS
• SSVC
• Severity Classification
• Exploitability Assessment
• Remediation Planning
• Threat Intelligence
• Red Teaming

Job areas

• Security & Safety
• Technology
• Data & Analytics
• Software
• Science & Research

More jobs from Alignerr