More about the Cybersecurity Expert role at Mercor

- Mercor is seeking senior cybersecurity professionals to build evaluation tasks for AI systems operating in security operations, incident response, and risk management contexts.
- The workflows are calibrated to the threat sophistication, business risk stakes, and scope of major enterprise security programs.
- This role builds worlds on two tracks: a US track (NIST Cybersecurity Framework, SOC 2) and an International track (ISO 27001, EU NIS2 Directive). Experts qualified in either or both tracks are encouraged to apply.
- Contributors design cybersecurity scenarios, draft reference outputs, and write rubrics that capture how senior security leaders think.

Key Responsibilities

- Construct cybersecurity scenarios spanning security operations center monitoring, incident response and forensics, vulnerability management, and security architecture design.
- Build tasks across security operations and threat detection, incident response and digital forensics, vulnerability and penetration testing, security architecture and engineering, and governance/risk/compliance.
- Develop scenarios involving tools such as SIEM platforms (Splunk, Microsoft Sentinel), EDR tools (CrowdStrike), vulnerability scanners (Tenable, Qualys), and GRC platforms used at major enterprises.
- Apply cybersecurity methodologies (threat modeling, incident response playbooks, risk assessment) to the standards track a world targets (US: NIST CSF, SOC 2; International: ISO 27001, NIS2), and produce reference incident reports, security assessments, architecture designs, and compliance documentation.
- Author rubrics that distinguish authentic security judgment from generic textbook or certification-exam-level recall.

Ideal Qualifications





- 5+ years working as a security engineer or CISO at a major company or security firm (Mandiant, CrowdStrike, or an in-house CISO/security lead).
- Direct ownership of incident response programs, security architecture, or compliance initiatives.
- Fluency in security tooling, plus understanding of regulatory frameworks and the current threat landscape.
- A recognized skilled credential is strongly preferred (CISSP, CISM, or an international equivalent); prior rubric or training authorship is a plus.

We consider all qualified applicants without regard to legally protected characteristics and provide reasonable accommodations upon request.

Contract and Payment Terms

- You will be engaged as an independent contractor.
- This is a fully remote role that can be completed on your own schedule.
- Projects can be extended, shortened, or concluded early depending on needs and performance.
- Your work at Mercor will not involve access to confidential or proprietary information from any employer, client, or institution.
- Payments are weekly on Stripe or Wise based on services rendered.
- Please note: We are unable to support H1-B or STEM OPT candidates at this time.

? Please consider applying even if you don't meet 100% of what’s outlined ?

Key Responsibilities

- ? Constructing cybersecurity scenarios
- ? Building evaluation tasks
- ? Developing reference outputs

Key Strengths

- ?️ Cybersecurity expertise
- ? Incident response
- ?️ Security architecture design
- ? Regulatory knowledge
- ? Security tooling proficiency
- ? Training and rubric development

Why Mercor is partnering with Hatch on this role. Hatch exists to level the playing field for people as they discover a career that’s right for them. So when you apply you have the chance to than just your resume.

A Final Note: This is a role with Mercor not with Hatch.

📌 Cybersecurity Expert @ Mercor (Australia)
🏢 Hatch
📍 Australia