Handle escalations from level I Threat Analysts and train new team members in a 24/7 SOC environment.
Conduct security log monitoring, event detection, and response using endpoint and network security tools.
Research threat intelligence, create MDR reports, and interact with clients to neutralize cyber threats.
Sophos is a global leader in cybersecurity, providing advanced threat detection and response solutions. The company is a remote-first organization with a diverse and collaborative culture, committed to innovation and employee growth.
Investigate and analyze logs and security-related events via Sophos tooling
Identify and respond to cyber threats occurring within customer environments
Communicate and document findings to various customer audiences including technical and executive teams
Sophos is a cybersecurity company that delivers best-in-class monitoring, detection, and response services. It is a remote-first company with a focus on teamwork and continuous improvement.
Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Maintain oversight of threat analysts and manage daily Security Operations Center activities.
Lead incident response and investigation to determine root cause and resolution.
Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.
Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.
Lead investigative execution of active cyber incidents for MDR customers and MSPs.
Work directly with customers to investigate, contain, and support remediation.
Mentor incident response analysts and provide technical guidance.
Sophos is a leading cybersecurity company focused on protecting organizations from cyber threats. As a remote-first company, they emphasize collaboration across global teams and are committed to diversity and inclusion.
Lead advanced threat investigations and independent threat hunting across diverse customer environments.
Act as an escalation point for complex incident analysis and collaborate with SOC analysts on emerging threats.
Develop detection capabilities, refine hunting methods, and deliver clear incident reports to strengthen defenses.
They are a cybersecurity partner specializing in managed detection and response services. The organization fosters a high-performance, collaborative culture grounded in integrity, ownership, and customer focus.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.
Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.
Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.
Develop use cases and detection rules while assisting in the conception and design of detection strategies.
Collaborate with the SOC for use case validation and acceptance, and refine existing detection rules.
Create dashboards and reports for customers or the internal SOC, and contribute to internal knowledge sharing.
Deutsche Telekom IT Solutions Slovakia provides innovative information and communication technology services and is a key driver of digitalization for medium-sized companies. With over 3,900 employees, we foster a culture of work-life balance and continuous transformation.
Triage MDR alerts and analyze security events in a 24x7 SOC environment.
Approve escalations, create playbooks, and verify protection actions.
Communicate with clients on high-severity incidents and act as an SME.
Critical Start is a cybersecurity company providing 24x7 AI-driven detection and response across IT and OT. The team is collaborative, high-trust, and casual, with a focus on innovation.
Lead investigative stream of active cyber incidents, performing advanced forensic analysis and containment tasks.
Utilize Sophos technologies to investigate, contain, and respond to cyber incidents across diverse customer environments.
Maintain detailed documentation and provide clear communication to MDR customers during incidents.
Sophos is a cybersecurity company that provides Managed Detection and Response (MDR) services. It is a remote-first company committed to fostering a diverse and inclusive workplace.
Investigate security alerts and support live incident response engagements.
Analyze suspicious software to identify malicious behavior and classify malware.
Conduct threat hunting and digital forensics to strengthen customer protection.
This company provides security operations services to protect organizations worldwide from cyber threats. It fosters a collaborative SOC environment where analysts gain hands-on experience with real-world security incidents.
Analyze incoming threat intelligence, assess its credibility and relevance, and run IOC sweeps across our environment.
Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management.
Develop and test detection rules, build orchestration workflows, and automate triage, enrichment, and response using AI tools.
We build the market-leading enterprise password manager and pioneered Unified Access Management, trusted by over 180,000 businesses. We've surpassed $500M in ARR, made the Forbes Cloud 100, and nurture a remote-first, collaborative culture.
Analyze, investigate, document, and report on security alerts and potential incidents in customer environments.
Serve as an incident coordinator for urgent security events requiring response, containment, and remediation.
Stay up-to-date on security training, certifications, and emerging threats to provide meaningful consultation.
CyberSheath provides cybersecurity services to the Defense Industrial Base, integrating compliance and threat mitigation to eliminate redundant security practices. It is a rapidly growing managed services provider focused on improving clients' security posture.
Investigate, contain, and remediate cybersecurity incidents across customer environments.
Conduct digital forensics, malware analysis, and threat intelligence to identify attacker techniques.
Collaborate with security operations and threat hunting teams to improve detection and response.
A cybersecurity company that provides incident response and digital forensics services to customers facing security threats. The team works remotely in a 24/7 security operations environment with a focus on collaboration and continuous improvement.
Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.
Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.
Lead ICS/OT cyber threat intelligence efforts for an Australian customer, driving threat hunts and shaping government strategy.
Analyze network traffic and industrial protocols to surface anomalies using tools like Dragos Platform and Synapse.
Translate technical findings into MITRE ATT&CK for ICS mappings and deliver actionable intelligence to non-technical stakeholders.
Dragos is a global leader in operational technology (OT) cybersecurity, protecting critical infrastructure like water, power, and hospitals from cyber threats. The company has a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.
Provide tier 2 and 3 support to customers and collaborate with threat researchers to challenge detection engines.
Analyze huge web traffic data sets to identify and block malicious traffic, and create scripts to detect outliers.
Identify potential attacks and add new alerts to strengthen DataDome's real-time detection platform.
DataDome stops cyberfraud and bots in real time using a multi-layered AI engine built on intent analysis. The company is backed by a 24/7 SOC team and a multicultural R&D team, with a joyful workplace and many social events.