Lead triage, scoping, containment, and eradication for medium-to-high severity security incidents across endpoint, identity, SaaS, and cloud environments.
Perform deep-dive investigations and query hunting using CrowdStrike Falcon and analyze web attacks using Cloudflare and Acquia logs.
Coordinate cross-departmental remediation, escalate incidents with root-cause analysis aligned with MITRE ATT&CK, and contribute to security awareness.
Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.
Mature and lead Security & Threat Operations, setting the operating model and roadmap for threat detection, investigation, and incident response.
Own detection engineering, monitoring, digital risk, exposure management, and security controls across AWS and corporate environments.
Act as Incident Commander during significant security incidents and partner with engineering, DevOps, and product teams to drive defensive improvements.
DriveWealth is a global B2B fintech that democratizes investing through an API-powered trading platform. The company blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street.
Lead investigative execution of active cyber incidents for MDR customers and MSPs.
Work directly with customers to investigate, contain, and support remediation.
Mentor incident response analysts and provide technical guidance.
Sophos is a leading cybersecurity company focused on protecting organizations from cyber threats. As a remote-first company, they emphasize collaboration across global teams and are committed to diversity and inclusion.
Lead and mentor a team of Incident Response analysts during active security incidents.
Serve as the primary customer-facing lead during investigations and crisis situations.
Coordinate incident triage, containment, eradication, and recovery efforts.
Check Point protects over 100,000 organizations worldwide from cyber and AI-driven threats with a prevention-first approach. Recognized by TIME, Newsweek, and Forbes, the company fosters a culture of smart, curious people who take ownership and solve complex problems.
Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.
Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.
Provide security support for infrastructure and end-user systems, including macOS endpoints and cloud environments.
Manage AI governance, vulnerability management, and endpoint security across a global remote team.
Handle vendor security assessments, audit observations, and third-party app reviews.
Gurobi Optimization empowers customers to expand their use of mathematical optimization technology for smarter decision-making. They are a small company with employees across 16 countries, fostering a collaborative and innovative culture.
Take ownership of daily security operations and compliance activities across a payment gateway and PCI DSS 4.0.1 environment.
Monitor security events, manage identities and access, investigate incidents, and ensure recurring PCI DSS and SOC 2 controls are documented.
Collaborate with engineering, infrastructure, network, and compliance teams to strengthen security controls and improve threat detection.
The company provides payment gateway and switching services, ensuring the security of sensitive payment data. It operates as a fully remote security team focused on compliance, continuous improvement, and safeguarding financial technology services.
Maintain oversight of threat analysts and manage daily Security Operations Center activities.
Lead incident response and investigation to determine root cause and resolution.
Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.
Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.
Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.
Utilize Sophos technologies to investigate, contain, and respond to cyber incidents for MDR customers and MSPs.
Mentor incident response analysts and provide technical guidance, review, and escalation support.
Perform advanced incident response analysis to identify initial access, persistence, and lateral movement to contain and remediate threats.
Sophos is a cybersecurity company providing advanced threat detection and response solutions. The company supports a diverse and inclusive workforce with flexible working arrangements, including remote roles.
Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR, and cloud security tooling.
Own vulnerability management lifecycle, conduct risk assessments, and enforce security controls on identity and endpoint platforms.
Automate detection and response workflows, drive AI security governance, and support compliance audits.
Abby Care builds an AI-native platform to enable family caregivers and improve home care outcomes. It is a startup backed by top VCs, with a culture emphasizing families first, urgency, resourcefulness, and positivity.
Monitor, triage, and investigate security alerts across identity, endpoint, email, and cloud environments.
Own routine investigations through to documented outcomes: gather evidence, establish timelines, and explain conclusions.
Improve runbooks, tune detections, and contribute to automation and scripting to simplify workflows.
Samsara is the pioneer of the Connected Operations Cloud, helping organizations improve safety, efficiency, and sustainability of physical operations. As a recently public company, it fosters a culture of ownership, flexibility, and belonging, with a global team focused on long-term impact.
Lead and develop squads of analysts across the Critical Incident Response Team, setting clear expectations and building an inclusive culture.
Own day-to-day CIRT operations, provide senior escalation, and act as Incident Commander for complex incidents.
Use metrics and feedback to drive continuous improvement and partner cross-functionally to strengthen MDR response.
Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services, including MDR and a portfolio of security technologies. It fosters a remote-first culture with employee-led diversity networks and a global partner ecosystem.
Monitor, triage, and resolve security alerts in Microsoft Defender XDR and Sentinel.
Lead incident response end-to-end and maintain ISO 27001 documentation and audits.
Administer IAM, PAM, and patch management to enforce least privilege and compliance.
Appen is a leader in AI training data, specializing in human-generated data to train, fine-tune, and evaluate models across generative AI, LLMs, computer vision, and speech. With over 1 million contributors in more than 200 countries, the company fosters a culture of innovation, collaboration, and humility.
Strengthen identity security and manage security tools including Microsoft Entra ID, Defender XDR, and Sentinel.
Own vulnerability management, incident response, and third-party vendor security risk programs.
Align security program with NIST CSF 2.0, CIS Controls, and SOC 2 Type II audits.
BCC Software develops innovative software and data solutions that power critical customer communications for organizations across North America. With more than 45 years of industry leadership, they combine deep postal expertise with modern technology to help customers streamline operations and improve efficiency.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Lead security incident response end-to-end across cloud, identity, and workload logs.
Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
Automate detection and response tasks using Python and Terraform, and mentor engineers.
Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.
Lead incident response operations, including prioritization, resource allocation, shift coverage, and escalation processes.
Oversee cyber incidents from escalation through containment, remediation, recovery, and closure, serving as Incident Commander for significant events.
Supervise team performance, develop personnel, and communicate incident status and risks to executives and business stakeholders.
NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing world-class content across film, television, streaming, and global theme parks. As a subsidiary of Comcast Corporation, the company operates a vast portfolio of iconic brands and fosters an inclusive culture that encourages employees to serve their communities.