Cybersecurity AI Trainer – Remote Consultant

About the role

We are looking for an experienced Cybersecurity AI Trainer to join our AI Labor Marketplace as a part‑time, project‑based consultant. You will work remotely with U.S.‑based experts to evaluate and improve AI‑assisted detections across Microsoft Sentinel, Entra ID, and Microsoft 365.

Key responsibilities

• Write production‑quality KQL queries and AI prompts to detect suspicious behavior such as impossible travel, mailbox rule abuse, or MFA fatigue.
• Review and score AI‑generated detections for accuracy, reasoning quality, ATT&CK coverage, and appropriate tool usage.
• Rank high‑risk entities and create visualizations using Sentinel Workbooks or Azure Monitor charts.
• Map detections to MITRE ATT&CK tactics and techniques and document findings, assumptions, and improvement recommendations.

Required profile

• 5+ years of experience in detection engineering, threat hunting, or SOC analysis.
• Hands‑on experience with SIEM, IDS/IPS, and endpoint detection and response solutions.
• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Fluent in KQL and capable of correlating data across multiple log sources.
• Strong knowledge of MITRE ATT&CK framework and analytic validation.
• Clear technical writing for reporting and documentation.
• Relevant certifications (SC‑200, SC‑300, AZ‑500 or equivalent).
• Experience with Azure Data Explorer, MSTICPy, Jupyter, and AI‑driven detection workflows.

Required skills

• KQL
• Python
• PowerShell
• Bash
• SIEM
• IDS/IPS
• EDR
• MITRE ATT&CK mapping
• Azure Data Explorer
• MSTICPy
• Jupyter notebooks
• AI‑driven detection

What we offer

• Project‑based consulting engagement with flexible scheduling.
• Hourly rate between $125 and $150.
• Remote work with autonomy to use your own tools.
• Opportunity to influence AI‑driven security products used worldwide.