Security Onion Security Operations Evaluator

You will complete realistic Security Onion investigations and review the quality of task outputs. The work combines practical security operations with prompt writing, rubric creation, documentation, and careful evaluation.

• Complete assigned Security Onion workflows and investigations using practical cybersecurity judgment.
• Analyze security alerts, network traffic, logs, and related security data to identify relevant findings.
• Record your screen while completing workflows and demonstrate the tools, steps, and investigation methods you use.
• Create realistic prompts and detailed rubrics based on completed workflows.
• Document workflow steps and explain technical decisions in clear, concise language.
• Review task outputs for accuracy and alignment with project guidelines and quality standards.

What it pays and takes

This is a part-time contractor role for candidates with practical Security Onion and cybersecurity operations experience. Prior AI-training work is helpful but not required.

• Pay: $90 to $175 per hour.
• Work type: Part-time contract work.
• Experience level: Entry level.
• Language: Professional fluency in English.
• Open to candidates in: United Arab Emirates, Argentina, Austria, Bangladesh, Belgium, Bahrain, Brazil, Canada, Switzerland, Chile, Colombia, Germany, Denmark, Algeria, Egypt, Spain, France, the United Kingdom, Ghana, Greece, Indonesia, India, Italy, Jordan, Japan, Kenya, Kyrgyzstan, Kuwait, Kazakhstan, Lebanon, Sri Lanka, Morocco, Mexico, Malaysia, Nigeria, the Netherlands, Oman, Peru, the Philippines, Pakistan, Palestine, Portugal, Qatar, Saudi Arabia, Singapore, Thailand, Tunisia, Taiwan, the United States, Uzbekistan, Vietnam, and South Africa.
• Strong hands-on experience using Security Onion for security monitoring, threat detection, or incident investigation.
• Current access to Security Onion and the ability to use it independently.
• Practical knowledge of network monitoring, alert investigation, log analysis, threat detection, or incident response.
• Strong attention to detail and the ability to communicate technical workflows clearly.
• Comfort recording and sharing your screen while demonstrating cybersecurity workflows.
• Experience with data annotation, labeling, RLHF, AI response evaluation, model evaluation, or similar human-data work is helpful.

How it works

Apply on OpenTrain with your resume, then complete the application on the hiring site. OpenTrain is where people find AI-training and data-labeling work, create a profile, and start applications.

About AI training work

AI training is the human work behind systems that learn from examples and feedback. This role uses cybersecurity expertise to create realistic tasks and judge whether AI-generated results are accurate, useful, and aligned with clear instructions.