Provide Tier III SOC support including advanced triage, forensic analysis, and escalation for complex incidents.
Lead shift handovers and maintain situational awareness of SOC tools and telemetry.
Support Red Team and Purple Team exercises to improve detection coverage.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the fastest growing privately held companies and Best Places to Work in DC for 12 consecutive years, they foster an employee-centric culture and commitment to excellence.
Analyze, investigate, document, and report on security alerts and potential incidents in customer environments.
Serve as an incident coordinator for urgent security events requiring response, containment, and remediation.
Stay up-to-date on security training, certifications, and emerging threats to provide meaningful consultation.
CyberSheath provides cybersecurity services to the Defense Industrial Base, integrating compliance and threat mitigation to eliminate redundant security practices. It is a rapidly growing managed services provider focused on improving clients' security posture.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Support a Federal civilian agency's Security Operations Center (SOC) as a Cyber Security Analyst.
Learn from experienced security professionals to detect, analyze, and mitigate potential intrusions and security incidents.
Work a 4-day, 10-hour weekly schedule with weekend and holiday availability.
We are a Virginia-based, small business advancing data analytics to impact cyber operations. We are a two-time Inc. Magazine 'Best Workplaces' awardee offering unique benefits and a positive work-life experience for our team.
Triage MDR alerts and analyze security events in a 24x7 SOC environment.
Approve escalations, create playbooks, and verify protection actions.
Communicate with clients on high-severity incidents and act as an SME.
Critical Start is a cybersecurity company providing 24x7 AI-driven detection and response across IT and OT. The team is collaborative, high-trust, and casual, with a focus on innovation.
Lead investigative stream of active cyber incidents, performing advanced forensic analysis and containment tasks.
Utilize Sophos technologies to investigate, contain, and respond to cyber incidents across diverse customer environments.
Maintain detailed documentation and provide clear communication to MDR customers during incidents.
Sophos is a cybersecurity company that provides Managed Detection and Response (MDR) services. It is a remote-first company committed to fostering a diverse and inclusive workplace.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Operate recurring vulnerability and compliance reporting, advise on remediation, and track issues to closure.
Monitor cloud security posture, triage misconfigurations, and support endpoint security compliance.
Build dashboards, automate tasks, and support vendor risk management and data loss prevention.
Harvard Medical School is dedicated to alleviating suffering and improving health through excellence in teaching, learning, discovery, and service, working alongside world-renowned faculty. The Information Technology Department enables this mission by delivering secure and scalable services, fostering a diverse and inclusive community.
Direct daily SOC operations, manage Tier I, II, and III analysts, and ensure continuous security monitoring and incident response.
Oversee the full incident response lifecycle, including detection, analysis, containment, eradication, and recovery.
Develop and maintain SOC documentation such as SOPs, playbooks, and escalation procedures to ensure consistent execution.
True Zero Technologies is a veteran-owned small business that enables people and technology to improve organizational outcomes. With a people-first culture, it has been recognized as a Best Place to Work and listed on the Inc. 5000 as one of America's fastest-growing companies.
Handle escalations from Level I analysts and guide on investigation handling.
On-board new threat analysts and participate in process improvement.
Conduct detection and response to security events and maintain security metrics.
Sophos is a global cybersecurity company specializing in managed detection and response services. With a remote-first culture and a global team, the company values diversity and collaboration.
Maintain oversight of threat analysts and manage daily Security Operations Center activities.
Lead incident response and investigation to determine root cause and resolution.
Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.
Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR, and cloud security tooling.
Own vulnerability management lifecycle, conduct risk assessments, and enforce security controls on identity and endpoint platforms.
Automate detection and response workflows, drive AI security governance, and support compliance audits.
Abby Care builds an AI-native platform to enable family caregivers and improve home care outcomes. It is a startup backed by top VCs, with a culture emphasizing families first, urgency, resourcefulness, and positivity.
Handle escalations from level I Threat Analysts and train new team members in a 24/7 SOC environment.
Conduct security log monitoring, event detection, and response using endpoint and network security tools.
Research threat intelligence, create MDR reports, and interact with clients to neutralize cyber threats.
Sophos is a global leader in cybersecurity, providing advanced threat detection and response solutions. The company is a remote-first organization with a diverse and collaborative culture, committed to innovation and employee growth.
Lead the development and implementation of comprehensive security programs for a large-scale multi-tenant cloud ecosystem.
Oversee risk assessments, incident response, and compliance with frameworks like FedRAMP, FISMA, and NIST SP 800-53.
Collaborate with cross-functional teams and serve as the primary point of contact for government leadership.
Peraton is a next-generation national security company that drives missions of consequence globally. As the world's leading mission capability integrator, they deliver trusted solutions to protect the nation and allies, employing a large workforce dedicated to solving daunting challenges.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Lead Tier 3 investigations into complex cybersecurity incidents, including malware, phishing, and ransomware attacks.
Coordinate incident response efforts across technical teams and stakeholders to ensure effective containment and recovery.
Prepare incident notifications, executive briefings, and post-incident reports to support continuous security improvement.
Jobgether uses an AI-powered matching process to connect candidates with hiring companies. The company operates as a platform that evaluates applications and shares shortlists with employers, focusing on efficient and fair recruitment.
Design and deploy SIEM architectures across on-prem, virtual, and cloud environments.
Create custom correlation rules and SOAR playbooks to address client-specific threats.
Mentor junior consultants and serve as technical advisor for complex SIEM/SOAR deployments.
AHEAD builds platforms for digital business by weaving advances in cloud, automation, analytics, and software delivery to help enterprises deliver on digital transformation. They prioritize a culture of belonging and invest in top-notch technologies for employee growth.
Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.
TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.