Investigate, contain, and remediate cybersecurity incidents across customer environments.
Conduct digital forensics, malware analysis, and threat intelligence to identify attacker techniques.
Collaborate with security operations and threat hunting teams to improve detection and response.
A cybersecurity company that provides incident response and digital forensics services to customers facing security threats. The team works remotely in a 24/7 security operations environment with a focus on collaboration and continuous improvement.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Monitor and analyze security events, advise on remediation, and investigate intrusion attempts by correlating multiple sources.
Follow standard operating procedures to detect, classify, document, and report security incidents and escalate as needed.
Use AI tools thoughtfully to reduce manual work and make faster, smarter decisions in a fast-paced environment.
Oportun is a mission-driven financial services company that empowers its members to build a better financial future through intelligent borrowing, savings, and budgeting. Since inception, it has provided over $22.7 billion in responsible credit and saved members more than $2.5 billion in interest and fees.
Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.
Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.
Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Analyze web traffic datasets to identify and block malicious bot activity.
Work with threat researchers and data scientists to challenge and improve the detection engine.
Participate in on-call rotation to respond quickly to customer attacks.
DataDome provides real-time bot and agent trust management, protecting businesses from automated attacks with AI-powered detection. The company is trusted by enterprises like Etsy, PayPal, and SoundCloud, and operates with a 24/7 SOC and threat research team.
Investigate security incidents using digital forensics and data analysis.
Build automation and detection models to identify unusual activity at scale.
Lead complex investigations with Legal, Privacy, and Engineering partners.
This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.
Lead advanced threat investigations and independent threat hunting across diverse customer environments.
Act as an escalation point for complex incident analysis and collaborate with SOC analysts on emerging threats.
Develop detection capabilities, refine hunting methods, and deliver clear incident reports to strengthen defenses.
They are a cybersecurity partner specializing in managed detection and response services. The organization fosters a high-performance, collaborative culture grounded in integrity, ownership, and customer focus.
Investigate and respond to security alerts and incidents.
Operate SIEM, endpoint protection, and threat detection tools.
Support vulnerability management and security assessments.
LEONI is a global leading provider of products, solutions and services for energy and data management in the automotive industry. With about 95,000 employees in 23 countries and part of Luxshare Group, we shape the future of mobility.
Design, implement, and maintain log collection pipelines across the organization.
Create, tune, and validate SIEM correlation rules and alerts for threat detection.
Support incident response through log analysis, documentation, and reporting.
We are a cutting-edge e-commerce company developing products for our own technological platform. Our teams are creative, smart, and dedicated, and we foster an open, collaborative, and respectful culture.
Lead high-profile incident response engagements as the primary handler and coordinator.
Perform triage, forensic artifact analysis, and large-scale investigations across endpoints and networks.
Mentor junior responders and communicate clearly with customers throughout the incident lifecycle.
Cyderes builds practical identity and access management, exposure management, and risk programs, helping organizations stop active threats fast with managed detection and response. A Great Place to Work-Certified global team, they are driven by experienced operators and augmented by AI to deliver trusted security solutions.
Provide tier 2 and 3 support to customers and collaborate with threat researchers to challenge detection engines.
Analyze huge web traffic data sets to identify and block malicious traffic, and create scripts to detect outliers.
Identify potential attacks and add new alerts to strengthen DataDome's real-time detection platform.
DataDome stops cyberfraud and bots in real time using a multi-layered AI engine built on intent analysis. The company is backed by a 24/7 SOC team and a multicultural R&D team, with a joyful workplace and many social events.
Oversee a team of cybersecurity professionals handling monitoring, triage, investigation, and incident response.
Act as the primary escalation point for complex investigations and coordinate with customers and internal teams.
Recruit, onboard, and develop MDR Security Analysts while driving continuous service improvement.
They provide managed detection and response (MDR) services to protect customer data through continuous monitoring, threat detection, and incident response. They operate in a global, 24/7 security operations environment with a collaborative, accountable team culture.
Proactively hunt for cyber threats and malicious activity undetected within network environments.
Collaborate with incident response and detection teams to investigate anomalies and develop intelligence.
Build hunting tools and automation to improve detection of sophisticated adversaries.
A partner company is hiring a cybersecurity threat hunter to proactively identify and analyze advanced cyber threats. The role is fully remote, contingent upon contract award, and requires a DoD Top Secret Clearance.
Serve as the primary contact for customer support requests via email, chat, phone, and ticketing while documenting each case thoroughly.
Triage and resolve common issues in OT environments with AI tools and documented solutions, escalating complex cases to Tier 2/3 while retaining ownership.
Participate in weekend on-call rotation and contribute to the knowledge base using KCS practices.
Dragos is a global leader in operational technology (OT) cybersecurity, protecting critical infrastructure like power and water systems by combining technology, threat intelligence, and expert services. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.
Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.
Triage and escalate security alerts across SIEM, EDR/XDR, WAF, email, and cloud sources while coordinating with an MSSP.
Own incidents end-to-end, documenting playbooks and updating detection logic so risk is actually reduced.
Develop and validate SIEM detection rules (ES|QL/EQL/KQL) and support building an insider threat monitoring program.
BTSE Group is a global leader in fintech and blockchain technology, providing white-label exchange and payment solutions, custody, wallets, and blockchain integration. They serve over 100 corporate clients worldwide and foster a lean, high-ownership security culture.
Design, modernize, and operate secure, resilient, and scalable enterprise networking platforms for customers.
Serve as the highest technical escalation point and trusted advisor across networking, cloud, security, and disaster recovery.
Drive availability, cyber resilience, performance, automation, and service quality while meeting SLA, RTO, and RPO objectives.
The hiring company is an enterprise technology organization offering secure, resilient, and scalable networking platforms and services. It fosters a collaborative, security-conscious culture focused on continuous improvement, technical leadership, and customer success.