Cyber Threat Intelligence SME

$70–110/hr

rate as listed

Workload: ~15h/week
Engagement: Project-based
Location: Worldwide
Field: STEM and Coding

Evaluate cyber threat intelligence scenarios and map them to established taxonomies for AI training. The work focuses on attribution, surveillance and privacy boundaries, source reliability, analytic reasoning, and appropriate handling of defensive requests.

The work

Contractors review cyber threat intelligence cases, map them to established taxonomies, and author boundary cases involving surveillance, privacy, attribution, and intrusion-adjacent requests. Day-to-day work also includes grading threat responses for source reliability, reasoning, limitations, and practical utility, while identifying over-refusal of legitimate defensive analysis.

Subject matter focus

The project deals with nation-state operations, advanced threats, APT tracking, adversary tactics and techniques, and the boundary between permissible analysis and impermissible offensive or surveillance activity. Contributors document difficult edge cases and provide concise written and verbal feedback that can improve AI threat-assessment behavior.

Screening

The platform is likely to test whether candidates can support CTI judgments with specific professional examples, distinguish evidence from inference in attribution, and apply safety boundaries without blocking valid defensive work. Substantial CTI experience is preferred, particularly around nation-state threats. Clear written and verbal communication in English is preferred. AI evaluation, red-teaming, mentoring, teaching, or CTI leadership experience is helpful but not required, and prior AI experience is not required.

Logistics

This is a remote contractor role. The listing does not state typical weekly hours, project duration, time-zone requirements, or whether all work is asynchronous, so candidates should be ready to give a precise availability window and confirm scheduling expectations with micro1. Pay band: $70–110/hr

What they look for

Nation-state threat judgment
Offensive/defensive line
Over-refusal detection
Cyber Thread Intelligence expertise

Included with this listing

Interview prep — 10 questions

Matched to what this platform's screening actually measures. Answer each out loud in 60–90 seconds: claim → concrete example → implication.

What it tests: This tests whether your CTI background is grounded in a verifiable engagement with identifiable responsibilities, evidence sources, analytic decisions, and deliverables.
A strong answer: Use one bounded case and state the environment, your exact ownership, the source types available, the analytic method used, and who consumed the output. Separate personal contributions from team work and avoid disclosing protected details.
Where people lose it: Candidates lose points by summarizing a well-known APT campaign without establishing what they personally investigated, produced, or decided.

Summary, eligibility guidance and screening preparation are prepared by Sidequest from the platform's posting. Check the source listing before applying.

STEM AND CODING on Sidequest

What stem and coding AI work pays

Rates by specialty, the platforms hiring, and every open role in this field.