Triage, investigate, and respond to alerts from the Huntress platform, reviewing EDR telemetry and forensic artifacts.
Perform tactical malware analysis and investigate suspicious M365 activity to determine root cause and provide remediations.
Assist in escalations, contribute to detection engineering, and collaborate on projects to improve analyst and partner outcomes.
Huntress is a fully remote, global team of cybersecurity experts on a mission to break down barriers to security. Founded in 2015 by former NSA operators, they protect over 4 million endpoints with enterprise-grade products, serving underresourced IT teams.
Work closely with industry-leading subject matter experts on real-world security response and collaborative projects.
Complete in-house training programs to enhance your security knowledge and skills.
Participate in partner-led vendor training and certifications for hands-on development.
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. The company has over 1,300 employees and is known for its enjoyable workplace atmosphere with strong core values.
Monitor security tools and analyze logs, alerts, and data for suspicious activity.
Investigate potential threats, determine if alerts are real incidents, and identify vulnerabilities.
Contain threats, remediate vulnerabilities, document findings, and report to management.
Mercury Insurance helps people reduce risk and overcome unexpected events by providing insurance solutions for over 60 years. They are a midsize employer recognized as one of America's Best Midsize Employers for 2026, fostering a collaborative and inclusive culture.
Participate in assessing client environments against frameworks like NIST CSF 2.0, CIS Controls, and ISO 27001.
Design and implement secure solutions across cybersecurity, networking, and cloud technologies.
Perform configuration, installation, and maintenance of security products and services.
Apollo Information Systems is a cybersecurity services company delivering unified security and compliance programs through a subscription-based platform. Backed by Series A funding, the company is growing rapidly with a collaborative, mission-driven culture and a remote-first team with a hub in Denver.
Support the security team by monitoring and triaging security activity, investigating potential threats, and improving security operations across endpoint, network, and cloud platforms.
Assist with developing SIEM detection rules, analyzing security telemetry for anomalous behavior, and conducting targeted threat-hunting activities.
Work with vulnerability management, threat intelligence, and documentation to strengthen security practices and ensure adherence to policies.
SimSpace is an AI Proving Ground that helps organizations train, test, and outmaneuver adversaries through realistic cyber simulations. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the company fosters a culture of continuous learning and professional growth, consistently outperforming industry benchmarks in internal mobility and promotions.
Operate and monitor cybersecurity controls for a FedRAMP- and CJIS-regulated SaaS product in AWS.
Triage security events, investigate threats, and support incident response with root-cause analysis.
Maintain security platforms, vulnerability management, and data protection operations across the environment.
Granicus provides cloud-based technology for government agencies to improve digital services and connect with communities. Over 25 years, they serve 5,500 agencies and 300 million subscribers, with a remote-first, inclusive culture.
Work on real cybersecurity tasks including Microsoft security configuration, threat research, and automation.
Collaborate directly with the Director of Cybersecurity on client security work and compliance support.
Build skills in security tooling, scripting, and documentation with a path to full-time employment.
EVOCS is an IT consulting firm that helps businesses operate more effectively through practical expertise and technology solutions. The company is a trusted technology partner to a growing number of organizations, with a team committed to quality and client relationships.
Monitor, investigate, and respond to cybersecurity alerts, incidents, vulnerabilities, and threats across enterprise, endpoint, cloud, network, and application environments.
Support compliance with NIST SP 800-171, CMMC, and applicable federal/DoD cybersecurity requirements, including protection of CUI and FCI.
Conduct cybersecurity risk assessments, vulnerability assessments, and security reviews; prioritize findings and coordinate remediation efforts.
Tlingit Haida Tribal Business Corporation (THTBC) delivers mission-critical services to federal clients globally, including logistics, IT, cybersecurity, and facilities operations. For over 35 years, the company has been committed to generating economic opportunity for the Tlingit & Haida Tribes of Alaska, fostering a purpose-driven culture.
Triage and investigate intrusions, analyze logs and forensic artifacts to determine root causes.
Perform dynamic malware analysis and refine detection capabilities to address emerging threats.
Collaborate with product and engineering teams to evolve human-led agentic workflows.
Huntress is a cybersecurity company founded in 2015 by former NSA cyber operators, making enterprise-grade security accessible to businesses of all sizes. They secure over 5 million endpoints and 14 million identities worldwide with a remote-first team and a 24/7 human-led Security Operations Center.
Support ransomware and cyber extortion engagements by managing threat actor communications and maintaining accurate case documentation.
Conduct research on threat actor groups, campaigns, and malware to provide actionable intelligence for active cases.
Coordinate with internal teams and external partners to ensure timely and accurate communication throughout engagements.
The company specializes in ransomware and cyber extortion incident response, supporting active engagements. They foster a collaborative remote culture with opportunities for professional growth and development.
Monitor, analyze, and respond to complex security incidents, guiding Level 1 engineers and contributing to the organization's security posture.
Conduct in-depth forensic analysis, manage vulnerabilities, and optimize security tools such as SIEM, IDS/IPS, and endpoint protection.
Collaborate with IT and security teams, participate in on-call support, and stay updated on the latest cybersecurity threats and best practices.
CTS delivers comprehensive IT solutions for mission-driven organizations, with deep expertise in nonprofits and education. The company is headquartered in Brooklyn, NY with 90+ employees across the US and several other countries, fostering a culture of growth and innovation.
Monitor system-generated alerts and respond to support requests via phone, email, and ticketing systems.
Triage infrastructure, endpoint, network, and security alerts while troubleshooting first-level technical issues.
Collaborate with Tier 2 and Tier 3 technicians and maintain accurate ticket documentation for escalations.
Our partner is a technology-focused organization that delivers managed IT and network operations services. They foster a collaborative remote culture and support career growth through continuous learning and certification reimbursement.
Independently execute endpoint security, identity management, and vulnerability remediation across Windows, macOS, Linux, and cloud platforms.
Monitor and analyze alerts within SIEM and EDR, conduct initial investigations, and escalate complex findings as needed.
Partner with IT, Engineering, DevOps, and IAM teams to maintain security controls and support compliance frameworks like SOC 2, HIPAA, and ISO 27001.
Accela is an industry leader in designing and delivering government software to improve efficiency, increase citizen engagement, and enable the development of thriving communities. The company has been operating for nearly 20 years, fosters a diverse and inclusive culture, and is committed to equity and belonging.
Design, develop, and maintain secure cloud environments for distributed LogRhythm deployments.
Act as a technical escalation point for SIEM engineers, solving complex security and infrastructure issues.
Build automation and operational tooling using PowerShell, SQL, Bash, or Python.
The company specializes in cybersecurity and managed SIEM services, focusing on protecting and scaling distributed LogRhythm environments. They offer a remote work environment with a collaborative culture and opportunities for professional growth.
Execute day-to-day implementation, monitoring, and optimization of cybersecurity systems and data pipelines.
Support log onboarding, normalization, and validation, as well as detection engineering and SIEM platform operations.
Assist in client engagements, security architecture reviews, and automation of response workflows.
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. The company has over 1,300 employees and maintains a culture of collaboration and mentorship.
Act as an intermediary between partners and the SOC team, providing exceptional customer support via phone, email, and chat.
Break down complex SOC concepts, log data, and product behavior into digestible guidance for partners.
Collaborate with internal teams to troubleshoot product issues and advocate for partner needs.
Huntress is a cybersecurity company founded by former NSA operators, offering enterprise-grade security to businesses of all sizes. It is a fully remote global team securing over 5M endpoints and 11M identities, with a culture of passionate ethical hackers.
Monitor security tools and investigate alerts to maintain situational awareness.
Manage vulnerability management platform and coordinate remediation of security vulnerabilities.
Conduct security awareness training and assist with incident response and reporting.
The organization is committed to maintaining robust information security practices. With a team of skilled professionals, it promotes a culture of continuous learning and adherence to high ethical standards.
Provide technical guidance and recommendations to clients to enhance their overall security posture within managed products.
Handle daily proactive maintenance and reactive troubleshooting/repair functions for security tools and systems.
Utilize SIEM and other tools to assist in network investigations, including firewalls, IDS/IPS and monitoring tools.
Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. The company provides a stimulating work environment with cutting-edge security technologies and opportunities for professional growth.
Lead and maintain ATO documentation and coordinate with security, engineering, and project teams to ensure compliance.
Monitor security events, investigate threats, and assess vulnerabilities across cloud and enterprise environments.
Develop and implement security policies, conduct risk analysis, and provide cybersecurity guidance to stakeholders.
The company is a partner organization focused on cybersecurity and federal technology modernization. It offers a fully remote, mission-driven culture with opportunities for growth in a technology-focused environment.
Manage day-to-day security operational availability and supportability of a 24x7x365 infrastructure.
Make recommendations on enhancements to security hardware, software, and tools, and perform risk analysis.
Configure, implement, monitor, and support security software/systems including firewalls, VPNs, IDS/IPS, DLP, etc.
eMoney Advisor is a wealth management system that offers transparency, security, mobile access, and superior organization. We serve more than 109,000 financial professionals and support over 6 million end clients, fostering a culture that values diversity and inclusion.