Perform DFIR investigations including host forensics, network traffic analysis, malware triage, log review, and BEC analysis.
Produce clear, accurate deliverables for technical and managerial audiences.
Collaborate with peers and engagement leads to deliver high-quality results.
GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations minimize risk and make better decisions. The company has over 1,300 employees and a collaborative culture driven by core values.
Lead high-profile incident response engagements as the primary handler and coordinator.
Perform triage, forensic artifact analysis, and large-scale investigations across endpoints and networks.
Mentor junior responders and communicate clearly with customers throughout the incident lifecycle.
Cyderes builds practical identity and access management, exposure management, and risk programs, helping organizations stop active threats fast with managed detection and response. A Great Place to Work-Certified global team, they are driven by experienced operators and augmented by AI to deliver trusted security solutions.
Lead protective intelligence operations, owning threat monitoring and executive safety.
Manage digital risk, travel security, and physical security assessments.
Coordinate with law enforcement, Legal, and vendors to protect people and brand.
Zerohash is a crypto and stablecoin infrastructure platform for banks, fintechs, and payment companies. Founded in 2017, it has raised $280M+ and is trusted by major brands, with a culture of independence, collaboration, and integrity.
Conduct original threat intelligence research into active email and identity attack campaigns.
Synthesize complex and conflicting data into clear assessments, reports, briefings, and webinars for varied audiences.
Partner with Sales, Customer Success, and Marketing to deliver intelligence that supports customer and prospect decisions.
Abnormal protects the humans behind the world's most critical organizations from AI-powered cybercrime. 5,000 enterprises trust our behavioral AI platform.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Investigate complex cyber abuse escalations across ransomware, malware, exploits, and data exfiltration threats.
Profile threat actors and campaigns using telemetry, external intel, and MITRE ATT&CK tradecraft.
Mentor junior investigators, review casework, and deliver high-fidelity labels for AI safety classifiers.
TaskUs is a provider of outsourced digital services and next-generation customer experience for fast-growing technology companies. With approximately 60,000 employees across 23 locations worldwide, the company maintains a People First culture focused on employee well-being and internal mobility.
Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.
Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.
Own customer RFIs from intake through delivery, conducting rapid-turnaround investigations and long-term research into fraud schemes, threat actors, and criminal ecosystems.
Analyze fraud TTPs across account takeover, payment fraud, phishing, and other schemes, and produce concise, client-ready intelligence reports.
Help identify and evaluate new open, deep, and dark-web sources and work with collections, engineering, and product teams to improve intelligence at scale.
Overwatch Data is building the intel and risk teams of the future, combining reliable automation, AI agents, and creative technical experts to help financial institutions and digital-facing companies identify cyber-enabled fraud across the open, deep, and dark web. The company emphasizes collaboration across engineering, data science, product, and customer teams to turn fragmented data into timely, evidence-backed intelligence.
Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.
Investigate, contain, and remediate cybersecurity incidents across customer environments.
Conduct digital forensics, malware analysis, and threat intelligence to identify attacker techniques.
Collaborate with security operations and threat hunting teams to improve detection and response.
A cybersecurity company that provides incident response and digital forensics services to customers facing security threats. The team works remotely in a 24/7 security operations environment with a focus on collaboration and continuous improvement.
Investigate security incidents using digital forensics and data analysis.
Build automation and detection models to identify unusual activity at scale.
Lead complex investigations with Legal, Privacy, and Engineering partners.
This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.
Lead OT incident response engagements for industrial customers, including investigations, threat hunts, and compromise assessments.
Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing response communications.
Deliver advisory services like IR planning workshops and maturity assessments, while mentoring teammates and improving methodologies.
Dragos is a global leader in OT cybersecurity, protecting critical infrastructure through technology, threat intelligence, and expert services. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC.
Lead and mentor a team of Incident Response analysts during active security incidents.
Serve as the primary customer-facing lead during investigations and crisis situations.
Coordinate incident triage, containment, eradication, and recovery efforts.
Check Point protects over 100,000 organizations worldwide from cyber and AI-driven threats with a prevention-first approach. Recognized by TIME, Newsweek, and Forbes, the company fosters a culture of smart, curious people who take ownership and solve complex problems.
Lead 24x7x365 incident coordination for escalated cyber threats, ensuring situational awareness and timely resolution.
Direct advanced incident response, including containment, remediation, recovery, and stakeholder communication.
Use Splunk SIEM, Microsoft Defender, and Cortex XSOAR to analyze security events and drive investigations.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the best places to work in the Washington DC area for 12 consecutive years, Valiant prides itself on an employee-centric culture and commitment to excellence.
Act as the primary post-sales technical liaison, delivering consultative support and resolving complex issues elevated beyond standard support.
Drive customer success by ensuring product adoption, leading technical QBRs, and identifying up-sell and cross-sell opportunities.
Serve as an internal advocate for customers, relaying product feedback to PM and engineering while leading training and onboarding.
Huntress is a cybersecurity company providing enterprise-grade protection with a 24/7 human-led SOC. Founded in 2015 by former NSA cyber operators, they are a remote-first team with a culture of inclusivity and customer commitment.
Direct and manage multiple work streams and resources during and after incident response and recovery engagements, including forensic imaging, breach containment, and infrastructure recovery.
Interface with external agency IR functions, third-party contractors, law firms, and customer leadership to coordinate a unified response to security incidents.
Collaborate with Security Operations and Engineering leaders to evaluate service offerings, build client relationships, and advise on security risks and mitigation strategies.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. Named one of the Washington Business Journal's Best Places to Work every year since 2014, Valiant is known for its employee-centric culture and commitment to excellence.
Handle a growing portfolio of primary first-party cyber claims, supporting end-to-end adjudication with increasing independence.
Complete a structured onboarding program with mentorship, progressing from supervised to independent file handling.
Partner with customers, brokers, and external vendors to respond to cyber incidents and reach optimal claim outcomes.
Converge fuses cyber insurance, security, and technology to deliver clear, confident cyber protection. Their team of top-tier professionals spans underwriting, technology, and claims.
Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.