Cybersecurity RL Environment Reviewer — Security Engineering (Defensive, Cloud & Infrastructure)

idler engages part-time reviewers through its idleXperts quality-assurance network to assess cybersecurity reinforcement-learning environments before delivery to customers. The role verifies that defensive-security and infrastructure-security tasks are realistic, solvable, and correctly graded, and documents issues or review decisions.

Responsibilities:

• Review a described incident, misconfiguration, or detection gap and confirm it's realistic, reproducible from the given logs/environment, and solvable by a skilled practitioner using only the provided context
• For detection/remediation tasks, confirm the grading actually distinguishes a correct fix from an incorrect or incomplete one (e.g., a rule that only coincidentally matches the sample data)
• For forensics tasks, confirm the planted artifact is genuinely recoverable through sound method, not by guessing
• Flag inconsistent files, missing context, unclear requirements, or anything that would make the task unsolvable or ambiguous
• Write a short, clear justification for every decision

Requirements:

• Hands-on experience in at least one of: SOC/detection engineering, incident response, cloud security (AWS/GCP/Azure IAM and misconfiguration), or digital forensics
• Comfortable working with logs, cloud consoles/CLIs, and a common detection-rule language (e.g., Sigma, KQL, or a SIEM's native query language), or standard forensic tooling
• Able to clearly explain, in writing, why a finding is or isn't realistic and correctly graded
• Reliable and self-directed, comfortable working async with limited oversight
• A certification such as GCIH, GCFA, GREM, CISSP, or a cloud-security credential (e.g., AWS Security Specialty)
• Experience building or tuning detection content professionally, not just consuming it
• CTF experience in forensics/misc categories, or past blue-team competition experience (e.g., CPTC, collegiate cyber defense)