micro1Cybersecurity
Security Onion Specialist
up to $175/hr
About this role, in micro1's words
micro1 is engaging Security Onion Specialists to contribute to a dynamic customer project focused on advancing security operations and threat detection capabilities. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters. This engagement is ideal for professionals who excel at both technical implementation and clear, concise communication, ensuring knowledge transfer and actionable insights.
What you'll do
Scope of Work
- Complete assigned workflows and tasks within Security Onion using your practical cybersecurity experience.
- Navigate Security Onion features related to network monitoring, alert investigation, log analysis, threat detection, and incident response.
- Analyze security alerts, network traffic, logs, and other relevant security data within Security Onion.
Show all 8 itemsHide the other 5 in Scope of Work
- Record your screen while completing assigned workflows and clearly demonstrate the steps taken.
- Create realistic prompts and detailed rubrics based on completed workflows.
- Document workflow steps and clearly explain the tools, features, and investigation techniques used.
- Review and evaluate task outputs for accuracy and alignment with project guidelines.
- Follow project instructions and quality standards while working independently in a remote environment.
Candidate background
Preferred Qualifications
- Strong hands-on experience using Security Onion for security monitoring, threat detection, or incident investigation.
- Prior Human Data experience, such as data annotation, labeling, RLHF, AI response evaluation, model evaluation, or similar work.
- Current access to Security Onion and ability to use the application independently.
Show all 5 itemsHide the other 2 in Preferred Qualifications
- Comfortable recording and sharing your screen while completing workflows.
- Strong attention to detail and ability to clearly explain technical workflows.
Quoted from selected sections of micro1's posting. The full posting may state other conditions. Read the full posting
A closer look
More context, when you need it.
Full job descriptionThe original posting, in micro1's words
Posted by micro1, reproduced here so you can judge the role before clicking. Original posting ↗
Role Title: Security Onion Specialist
Role Type: Contractor
Location: Remote
micro1 is engaging Security Onion Specialists to contribute to a dynamic customer project focused on advancing security operations and threat detection capabilities. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters. This engagement is ideal for professionals who excel at both technical implementation and clear, concise communication, ensuring knowledge transfer and actionable insights.
Scope of Work
• Complete assigned workflows and tasks within Security Onion using your practical cybersecurity experience.
• Navigate Security Onion features related to network monitoring, alert investigation, log analysis, threat detection, and incident response.
• Analyze security alerts, network traffic, logs, and other relevant security data within Security Onion.
• Record your screen while completing assigned workflows and clearly demonstrate the steps taken.
• Create realistic prompts and detailed rubrics based on completed workflows.
• Document workflow steps and clearly explain the tools, features, and investigation techniques used.
• Review and evaluate task outputs for accuracy and alignment with project guidelines.
• Follow project instructions and quality standards while working independently in a remote environment.
Preferred Qualifications
• Strong hands-on experience using Security Onion for security monitoring, threat detection, or incident investigation.
• Prior Human Data experience, such as data annotation, labeling, RLHF, AI response evaluation, model evaluation, or similar work.
• Current access to Security Onion and ability to use the application independently.
• Comfortable recording and sharing your screen while completing workflows.
• Strong attention to detail and ability to clearly explain technical workflows.
Working with micro1Pay, getting started and work, from micro1's own pages
What the platform publishes in general. These are not extra terms confirmed for this particular role.
- Getting paid
- Paid in US dollars twice a month through Deel, usually landing around the 5th and the 20th. Nothing is paid until Deel's identity check is done. library.micro1.ai/working/faqs, library.micro1.ai/working/payroll-policy
- Before your first paid task
- An AI interview with micro1's recruiter Zara, then your profile, ID verification, a KarmaCheck background check and the Deel contract. Some pipelines add a quiz or test task. micro1.ai/experts, micro1.ai/ai-interview-guide, library.micro1.ai/getting-started/next-steps-after-certif..., library.micro1.ai/working/faqs, library.micro1.ai/working/what-to-expect
- How much work
- Certification makes you eligible but does not guarantee placement. micro1's FAQ puts the usual commitment at about 15 to 20 hours a week, depending on the client. micro1.ai/experts, library.micro1.ai/working/faqs
- Contract
- Independent contractor, with the contract issued through Deel. library.micro1.ai/policies/understanding-your-expert-agre..., library.micro1.ai/working/deel
Read on the pages linked above on 23 Sep 2026. Platforms change these terms, so check the linked page before you rely on one.
Alex's experience on micro1A personal account, not a promise about your project
Alexruns this site and has worked on micro1 himself. Written 31 Aug 2026.
- Every interview I took used an AI interviewer, and some included a timed business exercise of around 25 minutes.
- On later applications, interview reuse on micro1 was often partial, and I still answered questions about one to three additional skills.
- I entered a requested rate for the job. One listing showed about $180 an hour. I requested about $160 and received the rate I entered. Those amounts are approximate, and this describes my application, not proof that a lower request caused acceptance.
- Onboarding and setup came to about 2 hours, with clear materials. Of the three platforms I worked on, it was the easiest transition into work. That is an estimate from my projects, not a platform average.
- On my micro1 project, Hubstaff showed time and mouse or keyboard activity, not screenshots, app names or website history. That describes what I saw, not every possible setup.
- I was paid for hours logged, once every 14 days, and I have not experienced late or incorrect payments. That was my arrangement.
One person's applications, not a promise about yours.
What happens after you apply, first-handHow does the pay compare?Across Cybersecurity roles, not this role alone
From our own daily reads of every open listing on the platforms we follow, not from micro1's posting. How we count.
Pay across the field: Cybersecurity
Across 54 roles in this field with a stated hourly rate in US dollars, on 10 platforms, the middle half pays $60 to $113 an hour at the top of the range, and the median is $90. This role's top rate, $175, is in the top quarter. Of the 26 distinct rates we count, 24 are lower and 1 are higher.
| Platform | Roles | Top of range, per hour |
|---|---|---|
| Alignerr | 32 | $55 to $120 · median $60 |
| Mercor | 4 | $90 to $250 |
| AfterQuery | 4 | $75 to $135 |
| DataAnnotation | 3 | $125 |
| micro1 (this platform) | 3 | $95 to $100 |
Sources and listing historyWhere this information comes from
This listing's history
- First seen here on 23 Sep 2026, and still on micro1's list when we last read it on 13 Oct 2026.
- The listed pay has not changed since then.
- Posted by micro1
- First seen by AIPayList
- Last seen live
- Listing ID
- 7bc65540-718f-4f23-8f27-69a12aa15d4b
Pay as the source states it: “micro1 job record, ideal_hourly_rate: $90–$175/hr”.
Platforms sometimes change a rate after posting. Every listing here is re-read at least once a day and corrected when its source moves, so a difference you see on the platform is usually a change made since the last read. How freshness works.
Keep exploring
More like this
Related field, different requirements. Check each role's own page before you apply.