Cybersecurity Expert

What you'll do

This is vulnerability research turned into training data. You create code repositories that contain OSS-Fuzz-style vulnerabilities, then produce and validate the patches that fix them. The ad frames it as material for training frontier AI models on cybersecurity workflows.

Work is project-based and fully asynchronous: no set hours and no meetings. The ad pitches it as something to fit around a full-time job, in evenings or at weekends.

Who fits

Required:

• 1 to 2+ years of experience in cybersecurity
• A bachelor's degree in Computer Science or a related field
• Experience with vulnerability research or security auditing

Preferred:

• Fuzzing tools, or OSS-Fuzz style vulnerability research
• Writing and patching code in C, C++ or similar low-level languages
• More than 2 years of hands-on security research

The application form asks for an ISC2 certification and a CompTIA certification, both marked optional.

What it pays

The board headlines $75/hr, and that is the only hourly figure in the ad. The pay section itself is task-based and does not agree with itself: it says "$300 per accepted task" in one line and "$50" per successfully accepted task in the next, with bonuses for quality and quantity of up to $180 per repository. The ad does not say how long a task takes, so the $75/hr figure cannot be checked against the task rates. Ask what a task pays, and how long the work behind it takes, before you count on the hourly number.

The ad does not publish payment terms such as payout schedule or minimum hours. AfterQuery's general payout arrangements are on the company page.

Worth knowing

Good:

• Fully remote and asynchronous, with no meetings or fixed hours
• Work that uses real vulnerability research skills rather than generic annotation
• Low entry bar for the field: 1 to 2 years of experience

Less good:

• Per-task pay with inconsistent figures in the text, so the real hourly yield is unclear
• A bachelor's degree is listed as required
• Project-based, so the ad promises no steady volume of work
• Hiring steps are not described in the ad. AfterQuery's help centre describes an unpaid, one-attempt assessment and ID verification for its expert pools; see the company page

About this listing

Posted on the AfterQuery Experts board on 26 May 2026 and read there on 18 October 2026. The role, qualifications and task rates above are AfterQuery's own text; the commentary on the figures is ours. See AfterQuery.