Lead 24x7x365 incident coordination for escalated cyber threats, ensuring situational awareness and timely resolution.
Direct advanced incident response, including containment, remediation, recovery, and stakeholder communication.
Use Splunk SIEM, Microsoft Defender, and Cortex XSOAR to analyze security events and drive investigations.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the best places to work in the Washington DC area for 12 consecutive years, Valiant prides itself on an employee-centric culture and commitment to excellence.
Direct and manage multiple work streams and resources during and after incident response and recovery engagements, including forensic imaging, breach containment, and infrastructure recovery.
Interface with external agency IR functions, third-party contractors, law firms, and customer leadership to coordinate a unified response to security incidents.
Collaborate with Security Operations and Engineering leaders to evaluate service offerings, build client relationships, and advise on security risks and mitigation strategies.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. Named one of the Washington Business Journal's Best Places to Work every year since 2014, Valiant is known for its employee-centric culture and commitment to excellence.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Analyze, investigate, document, and report on security alerts and potential incidents in customer environments.
Serve as an incident coordinator for urgent security events requiring response, containment, and remediation.
Stay up-to-date on security training, certifications, and emerging threats to provide meaningful consultation.
CyberSheath provides cybersecurity services to the Defense Industrial Base, integrating compliance and threat mitigation to eliminate redundant security practices. It is a rapidly growing managed services provider focused on improving clients' security posture.
Lead incident response operations, including prioritization, resource allocation, shift coverage, and escalation processes.
Oversee cyber incidents from escalation through containment, remediation, recovery, and closure, serving as Incident Commander for significant events.
Supervise team performance, develop personnel, and communicate incident status and risks to executives and business stakeholders.
NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing world-class content across film, television, streaming, and global theme parks. As a subsidiary of Comcast Corporation, the company operates a vast portfolio of iconic brands and fosters an inclusive culture that encourages employees to serve their communities.
Own the administration and optimization of security tools like S1, Tanium, Active Directory, Okta, and M365, and fine-tune alerts and automation.
Investigate threats, drive remediation across IT and business teams, and lead incident response from first alert to resolution.
Mentor security analysts, conduct quarterly tabletop exercises, and collaborate with stakeholders to strengthen overall security posture.
Lakeshore creates innovative learning materials and world-class guest experiences for teachers, parents and children. Since 1954, the company has grown into a global community with a thriving e-commerce business, over 50 stores, and a diverse team of inquisitive top talent.
Provide Tier III SOC support for advanced security monitoring, incident investigation, and forensic analysis in federal environments.
Lead threat detection and analysis using SIEM, endpoint telemetry, and threat intelligence to identify malicious activity.
Mentor junior analysts and improve SOC processes through SOP development and incident response playbook updates.
True Zero Technologies is a veteran-owned small business that focuses on enabling people and technology to deliver high-quality outcomes. It has been recognized as a Best Places to Work honoree and made the Inc. 5000 list for multiple years, reflecting its people-first culture and sustained growth.
Lead investigative stream of active cyber incidents, performing advanced forensic analysis and containment tasks.
Utilize Sophos technologies to investigate, contain, and respond to cyber incidents across diverse customer environments.
Maintain detailed documentation and provide clear communication to MDR customers during incidents.
Sophos is a cybersecurity company that provides Managed Detection and Response (MDR) services. It is a remote-first company committed to fostering a diverse and inclusive workplace.
Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR, and cloud security tooling.
Own vulnerability management lifecycle, conduct risk assessments, and enforce security controls on identity and endpoint platforms.
Automate detection and response workflows, drive AI security governance, and support compliance audits.
Abby Care builds an AI-native platform to enable family caregivers and improve home care outcomes. It is a startup backed by top VCs, with a culture emphasizing families first, urgency, resourcefulness, and positivity.
Contribute to thought leadership through research, whitepapers, and webinars, and mentor team members in operational excellence.
Dragos is a global leader in OT cybersecurity, protecting critical infrastructure with technology, threat intelligence, and expert services. It is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust.
Provide Tier III SOC support including advanced triage, forensic analysis, and escalation for complex incidents.
Lead shift handovers and maintain situational awareness of SOC tools and telemetry.
Support Red Team and Purple Team exercises to improve detection coverage.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the fastest growing privately held companies and Best Places to Work in DC for 12 consecutive years, they foster an employee-centric culture and commitment to excellence.
Lead the development and implementation of comprehensive security programs for a large-scale multi-tenant cloud ecosystem.
Oversee risk assessments, incident response, and compliance with frameworks like FedRAMP, FISMA, and NIST SP 800-53.
Collaborate with cross-functional teams and serve as the primary point of contact for government leadership.
Peraton is a next-generation national security company that drives missions of consequence globally. As the world's leading mission capability integrator, they deliver trusted solutions to protect the nation and allies, employing a large workforce dedicated to solving daunting challenges.
Lead Affirm's global security investigations and incident response program across the full lifecycle.
Serve as incident commander for major events, coordinating technical and cross-functional response.
Drive improvements to response tooling, detection, and AI-enabled investigation workflows.
Affirm builds honest financial products that let people pay over time with clear, predictable terms. We are a remote-first fintech company with a team-first culture focused on security, innovation, and long-term success.
Maintain oversight of threat analysts and manage daily Security Operations Center activities.
Lead incident response and investigation to determine root cause and resolution.
Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.
Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.
Lead and develop squads of analysts across the Critical Incident Response Team, setting clear expectations and building an inclusive culture.
Own day-to-day CIRT operations, provide senior escalation, and act as Incident Commander for complex incidents.
Use metrics and feedback to drive continuous improvement and partner cross-functionally to strengthen MDR response.
Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services, including MDR and a portfolio of security technologies. It fosters a remote-first culture with employee-led diversity networks and a global partner ecosystem.
Independently monitor and analyze security events across networks, systems, cloud platforms, and SaaS applications.
Manage vulnerability scanning, incident response, and remediation tracking through closure.
Administer security controls and support compliance audits under frameworks like NIST 800-171 and CMMC.
Kairos Power is a new nuclear energy technology and engineering company commercializing fluoride-salt-cooled, high-temperature reactors for clean energy. They are an equal opportunity employer building a diverse workforce and rewarding employees with competitive compensation and benefits.
Manage a global 24/7 Security Operations Center, defining and streamlining processes, workflows, and playbooks.
Lead and mentor a team of security analysts through weekly 1:1s, feedback, and career growth initiatives.
Collaborate with product, support, and security teams to scale operations and operationalize new technologies.
Huntress is a remote-first cybersecurity company founded in 2015 by former NSA cyber operators, providing enterprise-grade security to businesses of all sizes. It secures over 5 million endpoints and 16 million identities worldwide with a 24/7 human-led Security Operations Center.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Monitor and triage security alerts across identity, endpoint, email, network, cloud, and application technologies.
Investigate phishing, account compromise, malware, ransomware, and other security events while coordinating incident response.
Conduct threat intelligence, threat hunting, vulnerability management, and forensic evidence collection to protect company assets.
Trupanion is a leading provider of medical insurance for cats and dogs in North America. They offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.
Support a Federal civilian agency's Security Operations Center (SOC) as a Cyber Security Analyst.
Learn from experienced security professionals to detect, analyze, and mitigate potential intrusions and security incidents.
Work a 4-day, 10-hour weekly schedule with weekend and holiday availability.
We are a Virginia-based, small business advancing data analytics to impact cyber operations. We are a two-time Inc. Magazine 'Best Workplaces' awardee offering unique benefits and a positive work-life experience for our team.