Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Support a Federal civilian agency's Security Operations Center (SOC) as a Cyber Security Analyst.
Learn from experienced security professionals to detect, analyze, and mitigate potential intrusions and security incidents.
Work a 4-day, 10-hour weekly schedule with weekend and holiday availability.
We are a Virginia-based, small business advancing data analytics to impact cyber operations. We are a two-time Inc. Magazine 'Best Workplaces' awardee offering unique benefits and a positive work-life experience for our team.
Investigate security alerts and support live incident response engagements.
Analyze suspicious software to identify malicious behavior and classify malware.
Conduct threat hunting and digital forensics to strengthen customer protection.
This company provides security operations services to protect organizations worldwide from cyber threats. It fosters a collaborative SOC environment where analysts gain hands-on experience with real-world security incidents.
Manage escalated security alerts and coordinate incident response activities in a 24x7x365 SOC environment.
Lead investigations, track event lifecycles, and drive remediation and recovery actions with federal stakeholders.
Ensure accurate documentation and compliance with SOPs while supporting Tier 1 and Tier 3 analysts.
Valiant Solutions is a security-focused IT solutions provider serving public clients nationwide. Named one of the Best Places to Work in the Washington DC area for 12 consecutive years, it fosters an employee-centric culture and provides great benefits and career development opportunities.
Investigate, contain, and remediate cybersecurity incidents across customer environments.
Conduct digital forensics, malware analysis, and threat intelligence to identify attacker techniques.
Collaborate with security operations and threat hunting teams to improve detection and response.
A cybersecurity company that provides incident response and digital forensics services to customers facing security threats. The team works remotely in a 24/7 security operations environment with a focus on collaboration and continuous improvement.
Design, implement, and maintain log collection pipelines across the organization.
Create, tune, and validate SIEM correlation rules and alerts for threat detection.
Support incident response through log analysis, documentation, and reporting.
We are a cutting-edge e-commerce company developing products for our own technological platform. Our teams are creative, smart, and dedicated, and we foster an open, collaborative, and respectful culture.
Strengthen identity security and manage security tools including Microsoft Entra ID, Defender XDR, and Sentinel.
Own vulnerability management, incident response, and third-party vendor security risk programs.
Align security program with NIST CSF 2.0, CIS Controls, and SOC 2 Type II audits.
BCC Software develops innovative software and data solutions that power critical customer communications for organizations across North America. With more than 45 years of industry leadership, they combine deep postal expertise with modern technology to help customers streamline operations and improve efficiency.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Direct and manage multiple work streams and resources during and after incident response and recovery engagements, including forensic imaging, breach containment, and infrastructure recovery.
Interface with external agency IR functions, third-party contractors, law firms, and customer leadership to coordinate a unified response to security incidents.
Collaborate with Security Operations and Engineering leaders to evaluate service offerings, build client relationships, and advise on security risks and mitigation strategies.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. Named one of the Washington Business Journal's Best Places to Work every year since 2014, Valiant is known for its employee-centric culture and commitment to excellence.
Monitor and triage security alerts across identity, endpoint, email, network, cloud, and application technologies.
Investigate phishing, account compromise, malware, ransomware, and other security events while coordinating incident response.
Conduct threat intelligence, threat hunting, vulnerability management, and forensic evidence collection to protect company assets.
Trupanion is a leading provider of medical insurance for cats and dogs in North America. They offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.
Independently monitor and analyze security events across networks, systems, cloud platforms, and SaaS applications.
Manage vulnerability scanning, incident response, and remediation tracking through closure.
Administer security controls and support compliance audits under frameworks like NIST 800-171 and CMMC.
Kairos Power is a new nuclear energy technology and engineering company commercializing fluoride-salt-cooled, high-temperature reactors for clean energy. They are an equal opportunity employer building a diverse workforce and rewarding employees with competitive compensation and benefits.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Monitor, investigate, and respond to security alerts and incidents across customer environments.
Perform threat hunting, containment, eradication, and recovery activities for endpoint threats.
Document findings, develop security procedures, and recommend security improvements.
A-VEIT provides cybersecurity operations, threat management, and incident response services to enterprise customers. The company operates as a remote-first security team, emphasizing independent investigation and remediation of endpoint threats.
Monitor and maintain multiple SIEM environments, including Microsoft Sentinel and Splunk.
Configure data sources, log forwarders, and create custom dashboards, workbooks, and alerts.
Collaborate with clients to mature their SIEM security programs and provide technical guidance.
Critical Start delivers 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. They foster a collaborative, high-trust culture with casual dress, games, and a focus on innovation.
Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.
TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Coordinate and manage Major Incident process activities, including Sev1 and Sev2 incidents.
Communicate with internal and customer stakeholders on status, resolution, and success criteria.
Partner with Problem Management on RCA process and create Technical Action Plans.
HealthEdge offers AI-powered operational infrastructure for health insurance companies, helping them modernize operations and compete effectively. The company is experiencing strong market momentum and is investing in its people as it expands.
Triage MDR alerts and analyze security events in a 24x7 SOC environment.
Approve escalations, create playbooks, and verify protection actions.
Communicate with clients on high-severity incidents and act as an SME.
Critical Start is a cybersecurity company providing 24x7 AI-driven detection and response across IT and OT. The team is collaborative, high-trust, and casual, with a focus on innovation.
Monitor and triage security alerts, coordinate incident response, and run tabletop exercises.
Maintain technical security controls including encryption, key/certificate management, and secrets rotation.
Support SOC 2 and GDPR compliance through vendor reviews, client questionnaires, and evidence collection.
Graphite is a technology-enabled growth agency that helps fast-growing companies like Masterclass, Notion, and BetterUp unlock sustainable revenue through content, SEO, and AEO. We are a fully distributed team across North America, Latin America, and Europe, obsessed with impact and delivering outcomes for clients.