Cyber Threat Intelligence SME

Role Title: Cyber Threat Intelligence SME

Role Type: Contractor

Location: Remote

micro1 is engaging Cyber Threat Intelligence SMEs to contribute to a leading-edge customer project focused on evaluating and mapping advanced cyber threat scenarios. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required - your domain knowledge is what matters.

Scope of Work

• Map cyber threat intelligence (CTI) cases to established taxonomies, especially within the surveillance and privacy evaluation domains.
• Author boundary cases illustrating prohibited surveillance, attribution, and intrusion-adjacent requests, helping delineate permissible and impermissible actions.
• Evaluate and grade submitted threat responses with special attention to source reliability, analytic reasoning, stated limitations, and actionable utility.
• Identify and flag instances of over-refusal, ensuring legitimate threat analysis is not unnecessarily declined.
• Document and clarify challenging edge cases involving nation-state operations and other advanced threats.
• Provide concise written and verbal feedback to support the continuous improvement of AI threat assessment capabilities.

Preferred Qualifications

• Substantial experience in cyber threat intelligence, particularly where nation-state operations intersect with advanced cyber threats.
• Expertise in distinguishing between legitimate defensive/analytic activities and impermissible offensive or surveillance-focused requests.
• Background in threat-actor attribution, APT tracking, or exposure to adversary tactics and techniques.
• Demonstrated proficiency in authoring clear, structured written content in English and communicating complex concepts verbally.
• Experience mentoring, teaching, or leading professionals in threat intelligence disciplines.
• Prior participation in AI system evaluation, red-teaming, or related quality assurance projects is a plus.

Where you can work

This role is 100% remote: you can work from any country except Afghanistan, Belarus, DR Congo, China, Cuba, Ethiopia, Hong Kong, Iraq, Iran, North Korea, Libya, Myanmar, Macau, Russia, Sudan, Somalia, South Sudan, Syria, Ukraine, Venezuela and Yemen.