Triage MDR alerts and analyze security events in a 24x7 SOC environment.
Approve escalations, create playbooks, and verify protection actions.
Communicate with clients on high-severity incidents and act as an SME.
Critical Start is a cybersecurity company providing 24x7 AI-driven detection and response across IT and OT. The team is collaborative, high-trust, and casual, with a focus on innovation.
Lead 24x7x365 incident coordination for escalated cyber threats, ensuring situational awareness and timely resolution.
Direct advanced incident response, including containment, remediation, recovery, and stakeholder communication.
Use Splunk SIEM, Microsoft Defender, and Cortex XSOAR to analyze security events and drive investigations.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the best places to work in the Washington DC area for 12 consecutive years, Valiant prides itself on an employee-centric culture and commitment to excellence.
Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR, and cloud security tooling.
Own vulnerability management lifecycle, conduct risk assessments, and enforce security controls on identity and endpoint platforms.
Automate detection and response workflows, drive AI security governance, and support compliance audits.
Abby Care builds an AI-native platform to enable family caregivers and improve home care outcomes. It is a startup backed by top VCs, with a culture emphasizing families first, urgency, resourcefulness, and positivity.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Take ownership of daily security operations and compliance activities across a payment gateway and PCI DSS 4.0.1 environment.
Monitor security events, manage identities and access, investigate incidents, and ensure recurring PCI DSS and SOC 2 controls are documented.
Collaborate with engineering, infrastructure, network, and compliance teams to strengthen security controls and improve threat detection.
The company provides payment gateway and switching services, ensuring the security of sensitive payment data. It operates as a fully remote security team focused on compliance, continuous improvement, and safeguarding financial technology services.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Own the administration and optimization of security tools like S1, Tanium, Active Directory, Okta, and M365, and fine-tune alerts and automation.
Investigate threats, drive remediation across IT and business teams, and lead incident response from first alert to resolution.
Mentor security analysts, conduct quarterly tabletop exercises, and collaborate with stakeholders to strengthen overall security posture.
Lakeshore creates innovative learning materials and world-class guest experiences for teachers, parents and children. Since 1954, the company has grown into a global community with a thriving e-commerce business, over 50 stores, and a diverse team of inquisitive top talent.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Analyze, investigate, document, and report on security alerts and potential incidents in customer environments.
Serve as an incident coordinator for urgent security events requiring response, containment, and remediation.
Stay up-to-date on security training, certifications, and emerging threats to provide meaningful consultation.
CyberSheath provides cybersecurity services to the Defense Industrial Base, integrating compliance and threat mitigation to eliminate redundant security practices. It is a rapidly growing managed services provider focused on improving clients' security posture.
Triage and escalate security alerts across SIEM, EDR/XDR, WAF, email, and cloud sources while coordinating with an MSSP.
Own incidents end-to-end, documenting playbooks and updating detection logic so risk is actually reduced.
Develop and validate SIEM detection rules (ES|QL/EQL/KQL) and support building an insider threat monitoring program.
BTSE Group is a global leader in fintech and blockchain technology, providing white-label exchange and payment solutions, custody, wallets, and blockchain integration. They serve over 100 corporate clients worldwide and foster a lean, high-ownership security culture.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.
Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.
Monitor and triage security alerts across identity, endpoint, email, network, cloud, and application technologies.
Investigate phishing, account compromise, malware, ransomware, and other security events while coordinating incident response.
Conduct threat intelligence, threat hunting, vulnerability management, and forensic evidence collection to protect company assets.
Trupanion is a leading provider of medical insurance for cats and dogs in North America. They offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.
Direct and manage multiple work streams and resources during and after incident response and recovery engagements, including forensic imaging, breach containment, and infrastructure recovery.
Interface with external agency IR functions, third-party contractors, law firms, and customer leadership to coordinate a unified response to security incidents.
Collaborate with Security Operations and Engineering leaders to evaluate service offerings, build client relationships, and advise on security risks and mitigation strategies.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. Named one of the Washington Business Journal's Best Places to Work every year since 2014, Valiant is known for its employee-centric culture and commitment to excellence.
Monitor and maintain multiple SIEM environments, including Microsoft Sentinel and Splunk.
Configure data sources, log forwarders, and create custom dashboards, workbooks, and alerts.
Collaborate with clients to mature their SIEM security programs and provide technical guidance.
Critical Start delivers 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. They foster a collaborative, high-trust culture with casual dress, games, and a focus on innovation.
Maintain oversight of threat analysts and manage daily Security Operations Center activities.
Lead incident response and investigation to determine root cause and resolution.
Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.
Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.
Handle escalations from level I Threat Analysts and train new team members in a 24/7 SOC environment.
Conduct security log monitoring, event detection, and response using endpoint and network security tools.
Research threat intelligence, create MDR reports, and interact with clients to neutralize cyber threats.
Sophos is a global leader in cybersecurity, providing advanced threat detection and response solutions. The company is a remote-first organization with a diverse and collaborative culture, committed to innovation and employee growth.
Lead Affirm's global security investigations and incident response program across the full lifecycle.
Serve as incident commander for major events, coordinating technical and cross-functional response.
Drive improvements to response tooling, detection, and AI-enabled investigation workflows.
Affirm builds honest financial products that let people pay over time with clear, predictable terms. We are a remote-first fintech company with a team-first culture focused on security, innovation, and long-term success.
Operate the agentic SOC by supervising AI-driven triage, validating outputs, and making incident response decisions.
Build, test, and deploy automations, agent workflows, and integrations across security platforms.
Govern and measure agent performance, enforce guardrails, and support the 24/7 security team with clean handoffs.
HealthEquity is a healthcare financial technology company that empowers consumers to save and improve lives through HSA and benefits solutions. They protect the financial and health information of millions of members and foster a culture of remarkable teamwork, authenticity, and a focus on connecting health and wealth.
Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, and data-protection technologies.
Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider threat, and third-party events.
Conduct threat intelligence, threat hunting, and vulnerability management to prioritize and remediate risks.
Trupanion is a leading provider of medical insurance for cats and dogs in North America. We offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.