Source Job

$120,000–$160,000/yr
US

  • Investigate complex cyber abuse escalations across ransomware, malware, exploits, and data exfiltration threats.
  • Profile threat actors and campaigns using telemetry, external intel, and MITRE ATT&CK tradecraft.
  • Mentor junior investigators, review casework, and deliver high-fidelity labels for AI safety classifiers.

Incident Response MITRE ATT&CK SQL Python

20 jobs similar to Senior Cyber Investigator

Jobs ranked by similarity.

US

  • Investigate security incidents using digital forensics and data analysis.
  • Build automation and detection models to identify unusual activity at scale.
  • Lead complex investigations with Legal, Privacy, and Engineering partners.

This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.

US

  • Proactively hunt for cyber threats and malicious activity undetected within network environments.
  • Collaborate with incident response and detection teams to investigate anomalies and develop intelligence.
  • Build hunting tools and automation to improve detection of sophisticated adversaries.

A partner company is hiring a cybersecurity threat hunter to proactively identify and analyze advanced cyber threats. The role is fully remote, contingent upon contract award, and requires a DoD Top Secret Clearance.

$122,400–$176,000/yr
US

  • Conduct original threat intelligence research into active email and identity attack campaigns.
  • Synthesize complex and conflicting data into clear assessments, reports, briefings, and webinars for varied audiences.
  • Partner with Sales, Customer Success, and Marketing to deliver intelligence that supports customer and prospect decisions.

Abnormal protects the humans behind the world's most critical organizations from AI-powered cybercrime. 5,000 enterprises trust our behavioral AI platform.

$175,000–$190,000/yr
US

  • Lead high-profile incident response engagements as the primary handler and coordinator.
  • Perform triage, forensic artifact analysis, and large-scale investigations across endpoints and networks.
  • Mentor junior responders and communicate clearly with customers throughout the incident lifecycle.

Cyderes builds practical identity and access management, exposure management, and risk programs, helping organizations stop active threats fast with managed detection and response. A Great Place to Work-Certified global team, they are driven by experienced operators and augmented by AI to deliver trusted security solutions.

Global

  • Lead incident response for major hacks, coordinating triage, communications, and post-incident reports.
  • Ensure major hacks are visible to customers within hours and keep TRM's hack data complete and accurate.
  • Design AI-powered systems to automate hacks analysis and detect vulnerable contracts before exploitation.

TRM provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM is a Series C company with $220M in total funding, backed by top investors, operating as a distributed-first company with hubs in major cities.

$171,500–$245,000/yr
US

  • Dissect and outmaneuver sophisticated cyber attack techniques across endpoint and cloud environments.
  • Translate complex threat research into scalable detection recommendations and engineer attack code.
  • Collaborate with detection engineers, intelligence analysts, and threat hunters to prioritize and refine deliverables.

Zscaler provides a cloud security platform that securely connects users to applications, protecting customers from cyberattacks and data loss. It is the world's largest in-line cloud security platform with an AI-native culture.

$109,400–$191,500/yr
Canada Unlimited PTO

  • Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
  • Lead response to incidents affecting customers and track incidents to closure across functional teams.
  • Build and maintain incident response playbooks, handbooks, and cybersecurity standards.

ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.

$70,000–$80,000/yr
US 3w PTO

  • Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
  • Serve as the primary escalation point for Tier I analysts and own critical incidents.
  • Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.

Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.

US

  • Design and write detections for data misuse and exfiltration at scale, closing visibility gaps across infrastructure.
  • Build automation and detection models that surface anomalous activity and speed up response to insider threats.
  • Partner with engineering, HR, and Legal on complex investigations and participate in incident response and on-call rotation.

$71,500–$91,000/yr
Australia 12w maternity 12w paternity

  • Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
  • Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
  • Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.

Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.

US

  • Lead enterprise-scale security deployments using Microsoft Sentinel and Defender XDR.
  • Design advanced detection, automation, and reporting to improve threat visibility.
  • Mentor engineers and deliver technical leadership across complex customer projects.

This cybersecurity engineering partner helps organizations strengthen defenses against sophisticated digital threats using Microsoft Sentinel, Defender XDR, and Azure. It is a mission-driven, collaborative environment focused on innovation, technical leadership, and professional growth.

$160,000–$200,000/yr

  • Build and maintain backend services and AI-assisted applications for threat investigation workflows.
  • Partner with investigators to turn operational challenges into practical engineering solutions.
  • Troubleshoot production issues and support on-call coverage to keep critical systems reliable.

10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and global technology platforms. They are a focused engineering team building reliable, AI-powered investigation tools for high-stakes environments.

$70,000–$75,000/yr
US

  • Perform triage and advanced analysis across endpoint, server, and network infrastructure.
  • Conduct threat hunting and proactive investigations to detect malicious activities.
  • Document recommendations and maintain knowledge of the threat landscape.

Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.

Brazil

  • Lead the technical direction of a vulnerability intelligence practice, setting standards for validation and communication.
  • Research and validate newly disclosed vulnerabilities, including testing proof-of-concept exploits in isolated environments.
  • Build honeypots, detection methods, and automation to monitor real-world exploitation and deliver actionable intelligence.

They are a cybersecurity intelligence company focused on vulnerability research and real-world risk assessment. They are a remote-friendly international team with a collaborative culture built on openness, inclusion, integrity, and continuous learning.

$115,000–$128,000/yr
US Unlimited PTO

  • Lead advanced threat investigations and independent threat hunting across diverse customer environments.
  • Act as an escalation point for complex incident analysis and collaborate with SOC analysts on emerging threats.
  • Develop detection capabilities, refine hunting methods, and deliver clear incident reports to strengthen defenses.

They are a cybersecurity partner specializing in managed detection and response services. The organization fosters a high-performance, collaborative culture grounded in integrity, ownership, and customer focus.

Europe

  • Review cybersecurity prompts submitted to an AI system that could not be confidently classified as benign or malicious.
  • Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm.
  • Apply deep domain expertise to judge technical context, specificity, and real-world uplift a response would give an attacker.

They build specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions used by AI development teams to validate agent behavior before deployment.

US Unlimited PTO

  • Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
  • Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
  • Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.

SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.

$105,000–$105,000/yr
US

  • Act as the primary escalation point and technical lead for complex incidents.
  • Enhance monitoring by tuning alerts, refining detection logic, and automating workflows.
  • Mentor junior engineers and document incident response procedures.

DYOPATH is a managed security services provider that helps organizations defend against evolving cyber threats through security operations and monitoring. The company fosters an award-winning culture guided by its L.O.V.E. philosophy, emphasizing teamwork, respect, and professional growth.

France 5w PTO

  • Analyze web traffic datasets to identify and block malicious bot activity.
  • Work with threat researchers and data scientists to challenge and improve the detection engine.
  • Participate in on-call rotation to respond quickly to customer attacks.

DataDome provides real-time bot and agent trust management, protecting businesses from automated attacks with AI-powered detection. The company is trusted by enterprises like Etsy, PayPal, and SoundCloud, and operates with a 24/7 SOC and threat research team.

$143,500–$205,000/yr
US

  • Lead and develop a high-performing customer-facing team of threat hunters and MDR specialists.
  • Serve as senior escalation point for customer security teams during active intrusions and complex investigations.
  • Manage recurring customer engagements translating threat intelligence into actionable guidance.

Zscaler is a cloud security company that accelerates digital transformation with its Zero Trust Exchange platform, protecting customers from cyberattacks. With thousands of customers globally, Zscaler fosters a culture of ownership, collaboration, and innovation.