Security Onion Specialist

Employment Type: Contractor
Work Arrangement: Remote

Compensation

Hourly Rate: $90–$175 per hour

Annualized Full-Time Equivalent: $172,800–$336,000 per year

The annualized figure is based on 40 hours per week and 48 working weeks per year. Actual earnings depend on project availability, tasks completed, and hours worked.

About the Role

We are seeking experienced Security Onion Specialists to complete technical workflows and evaluate security operations tasks using Security Onion, a platform for network security monitoring, threat detection, and incident investigation.

You will apply practical cybersecurity expertise to analyze alerts, investigate network activity, examine logs, and demonstrate security workflows. You will also create realistic prompts, develop detailed evaluation rubrics, record task execution, and document your investigation methods clearly.

This opportunity is suited to professionals with hands-on Security Onion experience who can demonstrate technical procedures and communicate their findings effectively. Previous AI experience is not required.

Key Responsibilities

Security Monitoring & Investigation

• Complete assigned workflows and tasks within Security Onion using practical cybersecurity knowledge.

• Navigate platform features for network monitoring, alert investigation, log analysis, threat detection, and incident response.

• Analyze security alerts, network traffic, logs, and other relevant security data.

• Demonstrate investigation techniques and explain the tools and features used during each workflow.

Workflow Execution & Screen Recording

• Complete assigned technical workflows independently.

• Record your screen while executing tasks, clearly demonstrating the steps taken.

• Capture relevant investigation activities and platform interactions.

• Document workflow procedures in a clear, structured, and reproducible format.

Prompt Development & Evaluation

• Create realistic prompts based on completed Security Onion workflows.

• Develop detailed rubrics for evaluating task execution and outputs.

• Review task results for technical accuracy and compliance with project guidelines.

• Explain investigation methods and technical decisions clearly.

• Identify inaccuracies or gaps in submitted outputs and ensure work meets established quality standards.

Documentation & Quality Assurance

• Provide detailed explanations of the Security Onion features and investigation techniques used.

• Maintain accurate documentation and follow project instructions.

• Apply consistent quality standards when completing and reviewing tasks.

• Work independently in a remote environment while communicating technical information clearly.

Required Qualifications

• Strong hands-on experience using Security Onion for security monitoring, threat detection, or incident investigation.

• Practical ability to navigate Security Onion and complete assigned technical workflows independently.

• Current access to Security Onion.

• Ability to analyze security alerts, network traffic, logs, and relevant security data.

• Ability to record and share your screen while completing technical workflows.

• Strong attention to detail and commitment to following project instructions.

• Ability to document technical procedures and explain investigation techniques clearly.

• Strong written communication skills.

Preferred Qualifications

• Previous experience in human data projects, including data annotation, labeling, reinforcement learning from human feedback (RLHF), AI response evaluation, or model evaluation.

• Experience creating technical prompts and structured evaluation rubrics.

• Experience reviewing cybersecurity workflows for accuracy and consistency.

• Ability to translate practical security operations experience into clear, actionable documentation.

Key Skills

• Security Onion

• Cybersecurity

• Security Operations

• Network Security Monitoring

• Threat Detection

• Security Alert Investigation

• Log Analysis

• Network Traffic Analysis

• Incident Investigation

• Incident Response

• Technical Workflow Execution

• Prompt Development

• Evaluation Rubric Creation

• Screen Recording

• Technical Documentation

• Quality Assurance

• Attention to Detail

• Written Communication

Work Environment

This is a remote, hourly contract opportunity focused on Security Onion workflows, cybersecurity investigations, and technical task evaluation.

You will use your practical experience and access to Security Onion to complete assigned tasks, record your workflow, develop evaluation materials, and document your methods according to project guidelines.

What Success Looks Like

Success means completing accurate Security Onion workflows, demonstrating sound cybersecurity investigation techniques, and producing clear screen recordings, prompts, rubrics, and documentation.

Your work should be technically reliable, reproducible, and aligned with project quality standards, enabling consistent evaluation of security operations tasks.