Remote | Security Onion Specialist $90-$175/hour
$175/hour
ApplyRemote | Security Onion Specialist $90-$175/hour
Posted today
SENIORITY
Senior
SALARY
$175/hour
About the role
- Security Monitoring & Investigation
- Complete assigned cybersecurity workflows directly within Security Onion
- Investigate alerts generated through security-monitoring environments
- Analyse network traffic and related security telemetry
- Review logs and contextual information relevant to suspicious activity
- Apply practical incident-investigation judgement throughout assigned tasks
- Threat Detection & Incident Analysis
- Use Security Onion capabilities to identify and assess potential threats
- Interpret alerts within the context of broader network activity
- Investigate indicators associated with possible security incidents
- Analyse available security data to support accurate conclusions
- Document investigative reasoning and relevant findings clearly
- Workflow Execution & Screen Recording
- Navigate Security Onion independently while completing assigned workflows
- Record the screen while demonstrating required investigation steps
- Show how relevant tools and features are used during each workflow
- Follow task instructions accurately from beginning to completion
- Produce recordings that clearly demonstrate the technical process performed
- Prompt, Rubric & Documentation Development
- Create realistic prompts based on completed cybersecurity workflows
- Develop detailed rubrics for assessing task quality and correctness
- Document investigation steps in a clear and reproducible format
- Explain Security Onion tools, features, and investigation techniques used
- Translate practical security workflows into structured evaluation materials
- Output Review & Quality Evaluation
- Review completed task outputs for technical accuracy
- Evaluate whether results align with project instructions and quality standards
- Identify incomplete, incorrect, or inconsistent security-analysis outputs
- Provide structured feedback where improvements are required
- Maintain consistent quality while working independently in a remote environment
- Ideal Profile
- Strong hands-on experience using Security Onion
- Practical background in security monitoring and threat detection
- Experience investigating alerts and potential security incidents
- Strong network-traffic and log-analysis capabilities
- Comfortable navigating Security Onion independently
- Current access to Security Onion and ability to use the application without assistance
- Comfortable recording and sharing screen-based workflow demonstrations
- Strong attention to detail across technical investigation tasks
- Ability to explain cybersecurity workflows clearly and concisely
- Experience documenting tools, investigation steps, and analytical reasoning
- Prior human-data experience such as annotation, labelling, RLHF, AI-response evaluation, or model evaluation is advantageous
- Ability to work independently while following detailed project instructions
- Strong written technical communication skills
- No prior AI-training or model-evaluation experience is required
- Engagement Details
- Independent contractor engagement
- Fully remote
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
More like this
