Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.
Lead and mentor a team of Incident Response analysts during active security incidents.
Serve as the primary customer-facing lead during investigations and crisis situations.
Coordinate incident triage, containment, eradication, and recovery efforts.
Check Point protects over 100,000 organizations worldwide from cyber and AI-driven threats with a prevention-first approach. Recognized by TIME, Newsweek, and Forbes, the company fosters a culture of smart, curious people who take ownership and solve complex problems.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Mature and lead Security & Threat Operations, setting the operating model and roadmap for threat detection, investigation, and incident response.
Own detection engineering, monitoring, digital risk, exposure management, and security controls across AWS and corporate environments.
Act as Incident Commander during significant security incidents and partner with engineering, DevOps, and product teams to drive defensive improvements.
DriveWealth is a global B2B fintech that democratizes investing through an API-powered trading platform. The company blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street.
Lead high-profile incident response engagements as the primary handler and coordinator.
Perform triage, forensic artifact analysis, and large-scale investigations across endpoints and networks.
Mentor junior responders and communicate clearly with customers throughout the incident lifecycle.
Cyderes builds practical identity and access management, exposure management, and risk programs, helping organizations stop active threats fast with managed detection and response. A Great Place to Work-Certified global team, they are driven by experienced operators and augmented by AI to deliver trusted security solutions.
Lead 24x7x365 incident coordination for escalated cyber threats, ensuring situational awareness and timely resolution.
Direct advanced incident response, including containment, remediation, recovery, and stakeholder communication.
Use Splunk SIEM, Microsoft Defender, and Cortex XSOAR to analyze security events and drive investigations.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the best places to work in the Washington DC area for 12 consecutive years, Valiant prides itself on an employee-centric culture and commitment to excellence.
Lead incident response operations, including prioritization, resource allocation, shift coverage, and escalation processes.
Oversee cyber incidents from escalation through containment, remediation, recovery, and closure, serving as Incident Commander for significant events.
Supervise team performance, develop personnel, and communicate incident status and risks to executives and business stakeholders.
NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing world-class content across film, television, streaming, and global theme parks. As a subsidiary of Comcast Corporation, the company operates a vast portfolio of iconic brands and fosters an inclusive culture that encourages employees to serve their communities.
Lead detection and response strategy for Apollo's Security team, building detection systems and response automations hands-on.
Own detection architecture, security observability, and incident response readiness across cloud and SaaS environments.
Drive AI-augmented detection and response, measuring gains in speed, coverage, and signal quality.
Apollo.io is a leading go-to-market platform for revenue teams, providing verified contact data and engagement tools for over 500,000 companies. Founded in 2015, it has raised ~$250M, is valued at $1.6B, and fosters an AI-native culture of continuous improvement.
Direct and manage multiple work streams and resources during and after incident response and recovery engagements, including forensic imaging, breach containment, and infrastructure recovery.
Interface with external agency IR functions, third-party contractors, law firms, and customer leadership to coordinate a unified response to security incidents.
Collaborate with Security Operations and Engineering leaders to evaluate service offerings, build client relationships, and advise on security risks and mitigation strategies.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. Named one of the Washington Business Journal's Best Places to Work every year since 2014, Valiant is known for its employee-centric culture and commitment to excellence.
Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.
Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.
Lead SNHU's Security Operations Center as the senior escalation point and Incident Coordinator.
Develop SIEM alerts, reports, and dashboards; manage security tools like Splunk and Defender XDR.
Drive vulnerability management and communicate risks to stakeholders across the organization.
We are a private, nonprofit university dedicated to transforming lives through education since 1932. We serve over 180,000 learners worldwide with a people-centered strategy and a culture of innovation and inclusion.
Lead DoorDash's global Cyber Defense organization, including Incident Response, Detection Engineering, Threat Intelligence, Threat Hunting, and Insider Threat teams.
Collaborate with the CSO and senior leaders to align cyber defense strategy with business objectives and drive incident response.
Deploy advanced threat detection technologies, analyze threat intelligence, and mentor a growing security engineering team.
DoorDash is a technology and logistics company that enables on-demand delivery and empowers local economies. The company has grown to tens of thousands of employees across more than 40 countries, with a culture focused on empathy, speed, and innovation.
Manage a global 24/7 Security Operations Center, defining and streamlining processes, workflows, and playbooks.
Lead and mentor a team of security analysts through weekly 1:1s, feedback, and career growth initiatives.
Collaborate with product, support, and security teams to scale operations and operationalize new technologies.
Huntress is a remote-first cybersecurity company founded in 2015 by former NSA cyber operators, providing enterprise-grade security to businesses of all sizes. It secures over 5 million endpoints and 16 million identities worldwide with a 24/7 human-led Security Operations Center.
Operate the agentic SOC by supervising AI-driven triage, validating outputs, and making incident response decisions.
Build, test, and deploy automations, agent workflows, and integrations across security platforms.
Govern and measure agent performance, enforce guardrails, and support the 24/7 security team with clean handoffs.
HealthEquity is a healthcare financial technology company that empowers consumers to save and improve lives through HSA and benefits solutions. They protect the financial and health information of millions of members and foster a culture of remarkable teamwork, authenticity, and a focus on connecting health and wealth.
Lead security incident response end-to-end across cloud, identity, and workload logs.
Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
Automate detection and response tasks using Python and Terraform, and mentor engineers.
Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.
Manage escalated security alerts and coordinate incident response activities in a 24x7x365 SOC environment.
Lead investigations, track event lifecycles, and drive remediation and recovery actions with federal stakeholders.
Ensure accurate documentation and compliance with SOPs while supporting Tier 1 and Tier 3 analysts.
Valiant Solutions is a security-focused IT solutions provider serving public clients nationwide. Named one of the Best Places to Work in the Washington DC area for 12 consecutive years, it fosters an employee-centric culture and provides great benefits and career development opportunities.
Implement and configure security applications and infrastructure to support corporate policies and federal and state regulations.
Serve as an information security subject matter expert, including familiarity with cloud implementations.
Lead infrastructure security assessments and incident response efforts across networking, servers, databases, and applications.
KnitWell Group is a specialty retail operating company comprising iconic American brands such as Ann Taylor, Chico's, LOFT, and Talbots. Our associates are innovators who thrive through collaboration and are dedicated to excellence, creating fashion that makes customers feel good.
Lead, coach, and develop a team of Security Consultants through regular feedback and performance management.
Drive operational excellence by measuring team performance, identifying automation opportunities, and implementing process improvements.
Act as a subject matter expert in web, network, cloud, or mobile security and handle complex escalations and appeals.
Bugcrowd is a preemptive security platform that unifies exposure discovery, offensive testing, and AI-driven intelligence to help organizations identify and validate real-world risk. Based in San Francisco and New Hampshire and supported by top venture capital firms, the company fosters a diverse, family-like culture with a broad range of backgrounds including musicians, adventurers, and parents.
Own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities.
Develop and tune detections, maintain operational dashboards, and automate response actions.
Support security incidents, gather evidence, and participate in the on-call rotation.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. We are a diverse team of 400+ globally distributed members who value curiosity, empathy, and accountability.