Build, deploy, and continuously improve MITRE ATT&CK–aligned detections across cloud, endpoint, identity, email, and application telemetry with clear false-positive thresholds.
Own the full detection lifecycle from hypothesis and data validation through deployment, tuning, and retirement.
Advance the detection-as-code platform with version control, peer review, automated testing, CI/CD, and improved pipeline reliability and observability.
Samsara is the pioneer of the Connected Operations™ Cloud, helping organizations that depend on physical operations to harness IoT data for actionable insights. They are a recently public company with a high-caliber team, embracing a flexible working model that supports remote and hybrid work.
Act as the primary escalation point and technical lead for complex incidents.
Enhance monitoring by tuning alerts, refining detection logic, and automating workflows.
Mentor junior engineers and document incident response procedures.
DYOPATH is a managed security services provider that helps organizations defend against evolving cyber threats through security operations and monitoring. The company fosters an award-winning culture guided by its L.O.V.E. philosophy, emphasizing teamwork, respect, and professional growth.
Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.
Lead high-profile incident response engagements as the primary handler and coordinator.
Perform triage, forensic artifact analysis, and large-scale investigations across endpoints and networks.
Mentor junior responders and communicate clearly with customers throughout the incident lifecycle.
Cyderes builds practical identity and access management, exposure management, and risk programs, helping organizations stop active threats fast with managed detection and response. A Great Place to Work-Certified global team, they are driven by experienced operators and augmented by AI to deliver trusted security solutions.
Lead investigation and resolution of complex cybersecurity incidents in the Security Operations Centre.
Analyze and correlate security events from SIEM, IDS, EDR, and other sources.
Conduct digital forensic investigations and provide expert guidance throughout the incident response lifecycle.
Eurofins Scientific is an international life sciences company providing analytical testing services to make life and the environment safer, healthier, and more sustainable. With over 65,000 employees across 950+ laboratories in 60 countries, they are a global leader in testing and laboratory services.
Provide technical and operational leadership for a Security Operations Center, monitoring threats and driving incident response.
Design and develop security tools and platforms to improve detection, response, and operational efficiency.
Mentor early-career engineers and contribute to open source security projects and industry conferences.
Jobgether uses AI-powered matching to help candidates find jobs. The company operates a fully distributed, remote-first environment with in-person team events.
Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.
Protect cloud infrastructure, applications, and customer data across a modern technology environment.
Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.
Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.
Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.
Lead security incident response end-to-end across cloud, identity, and workload logs.
Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
Automate detection and response tasks using Python and Terraform, and mentor engineers.
Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.
Lead detection and response strategy for Apollo's Security team, building detection systems and response automations hands-on.
Own detection architecture, security observability, and incident response readiness across cloud and SaaS environments.
Drive AI-augmented detection and response, measuring gains in speed, coverage, and signal quality.
Apollo.io is a leading go-to-market platform for revenue teams, providing verified contact data and engagement tools for over 500,000 companies. Founded in 2015, it has raised ~$250M, is valued at $1.6B, and fosters an AI-native culture of continuous improvement.
Perform security monitoring, digital forensics, and incident response across corporate, product, and mission environments.
Conduct threat hunting and apply cyber threat intelligence to secure the enterprise and improve detection capabilities.
Support vulnerability management, compliance assessments, and documentation of security procedures.
BlackSky is a real-time intelligence company that owns and operates a space-based intelligence platform, providing satellite imagery, automated analytics, and high-frequency monitoring. Its global team works with cutting-edge technology and is people-first, customer-focused, and fun.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Mature and lead Security & Threat Operations, setting the operating model and roadmap for threat detection, investigation, and incident response.
Own detection engineering, monitoring, digital risk, exposure management, and security controls across AWS and corporate environments.
Act as Incident Commander during significant security incidents and partner with engineering, DevOps, and product teams to drive defensive improvements.
DriveWealth is a global B2B fintech that democratizes investing through an API-powered trading platform. The company blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street.
Safeguard customer digital assets, sensitive data, and critical systems against cyber threats as part of the MXDR team.
Leverage expertise in vulnerability identification, robust security implementation, and incident response to enhance security posture.
Collaborate with cross-functional teams to assess risks, formulate security strategies, and ensure adherence to industry standards.
Check Point Software Technologies is a leading vendor of cybersecurity solutions, protecting against sophisticated threats and attacks. The company has been honored by Time Magazine as one of the World’s Best Companies for 2024 and recognized as one of the World’s Top Female-Friendly Places to Work.
Monitor, triage, and respond to security alerts and incidents across the security stack.
Engineer, implement, and maintain information security technologies such as SIEM, detection rules, and automation.
Collaborate with teams to promote information security culture and advise on cyber risk across the organization.
VEIC is a sustainable energy organization working toward a healthy planet, thriving people, and energy justice. The company values an inclusive culture and supports flexible work arrangements, welcoming candidates of all backgrounds.
Review defensive-security and infrastructure-security RL environments for realism, solvability, and correct grading.
Flag missing context, inconsistent files, unclear requirements, or anything that makes tasks ambiguous.
Write concise justifications for each decision and work async on a flexible part-time schedule.
IdleXperts is idler's quality assurance network, made up of part-time remote experts who review reinforcement-learning environments before customer delivery. The company relies on independent, self-directed contributors with deep security expertise to ensure tasks are fair and correctly graded.
Proactively hunt for cyber threats and malicious activity undetected within network environments.
Collaborate with incident response and detection teams to investigate anomalies and develop intelligence.
Build hunting tools and automation to improve detection of sophisticated adversaries.
A partner company is hiring a cybersecurity threat hunter to proactively identify and analyze advanced cyber threats. The role is fully remote, contingent upon contract award, and requires a DoD Top Secret Clearance.