Monitor and maintain multiple SIEM environments, including Microsoft Sentinel and Splunk.
Configure data sources, log forwarders, and create custom dashboards, workbooks, and alerts.
Collaborate with clients to mature their SIEM security programs and provide technical guidance.
Critical Start delivers 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. They foster a collaborative, high-trust culture with casual dress, games, and a focus on innovation.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities.
Develop and tune detections, maintain operational dashboards, and automate response actions.
Support security incidents, gather evidence, and participate in the on-call rotation.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. We are a diverse team of 400+ globally distributed members who value curiosity, empathy, and accountability.
Operate the agentic SOC by supervising AI-driven triage, validating outputs, and making incident response decisions.
Build, test, and deploy automations, agent workflows, and integrations across security platforms.
Govern and measure agent performance, enforce guardrails, and support the 24/7 security team with clean handoffs.
HealthEquity is a healthcare financial technology company that empowers consumers to save and improve lives through HSA and benefits solutions. They protect the financial and health information of millions of members and foster a culture of remarkable teamwork, authenticity, and a focus on connecting health and wealth.
Develop use cases and detection rules while assisting in the conception and design of detection strategies.
Collaborate with the SOC for use case validation and acceptance, and refine existing detection rules.
Create dashboards and reports for customers or the internal SOC, and contribute to internal knowledge sharing.
Deutsche Telekom IT Solutions Slovakia provides innovative information and communication technology services and is a key driver of digitalization for medium-sized companies. With over 3,900 employees, we foster a culture of work-life balance and continuous transformation.
Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR, and cloud security tooling.
Own vulnerability management lifecycle, conduct risk assessments, and enforce security controls on identity and endpoint platforms.
Automate detection and response workflows, drive AI security governance, and support compliance audits.
Abby Care builds an AI-native platform to enable family caregivers and improve home care outcomes. It is a startup backed by top VCs, with a culture emphasizing families first, urgency, resourcefulness, and positivity.
Design, develop, and maintain reusable security automation components, integrations, and playbooks.
Integrate SIEM, SOAR, EDR, vulnerability management, and threat intelligence platforms with AI-driven workflows.
Apply software engineering best practices and collaborate across teams to deliver production-ready security solutions.
This role is for a client in the technology, information, and media sector, focused on security automation and cybersecurity solutions. The team environment is product-focused, fast-paced, and emphasizes collaboration and engineering excellence.
Deliver end-to-end threat intelligence enablement and technical onboarding, optimizing customer digital footprints and alert rules for noise-free monitoring.
Develop custom automation scripts, AI agents, and SOAR playbooks to streamline security workflows and enhance platform adoption.
Drive customer retention through proactive engagement, churn risk analysis, and adaptive threat reporting.
SOCRadar provides Extended Threat Intelligence (XTI) solutions that help organizations proactively secure their attack surfaces and gain visibility into surface, deep, and dark web threats. The company is focused on innovation, global expansion, and delivering automation-enabled security to enterprises worldwide.
Own endpoint detection and response across managed security customers.
Deploy, tune, and run EDR platforms such as CrowdStrike Falcon, Microsoft Defender, and SentinelOne.
Manage SIEM pipelines and build API integrations to keep telemetry healthy.
Legato Security is an information security firm that helps organizations keep data private and secure, acting as trusted advisors to build proactive security plans. It is a start-up in a growth phase with a start-up culture and an office in downtown Salt Lake City, UT.
Own the administration and optimization of security tools like S1, Tanium, Active Directory, Okta, and M365, and fine-tune alerts and automation.
Investigate threats, drive remediation across IT and business teams, and lead incident response from first alert to resolution.
Mentor security analysts, conduct quarterly tabletop exercises, and collaborate with stakeholders to strengthen overall security posture.
Lakeshore creates innovative learning materials and world-class guest experiences for teachers, parents and children. Since 1954, the company has grown into a global community with a thriving e-commerce business, over 50 stores, and a diverse team of inquisitive top talent.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Provide Tier III SOC support including advanced triage, forensic analysis, and escalation for complex incidents.
Lead shift handovers and maintain situational awareness of SOC tools and telemetry.
Support Red Team and Purple Team exercises to improve detection coverage.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the fastest growing privately held companies and Best Places to Work in DC for 12 consecutive years, they foster an employee-centric culture and commitment to excellence.
Triage MDR alerts and analyze security events in a 24x7 SOC environment.
Approve escalations, create playbooks, and verify protection actions.
Communicate with clients on high-severity incidents and act as an SME.
Critical Start is a cybersecurity company providing 24x7 AI-driven detection and response across IT and OT. The team is collaborative, high-trust, and casual, with a focus on innovation.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Act as the blue team voice, defining what "correct" means for firewall detection and remediation.
Partner with Product and Engineering to turn firewall tuning goals into buildable requirements.
Own deep knowledge of major firewall platforms and validate features against real SOC workflows.
Horizon3 is a fast-growing, remote cybersecurity company enabling organizations to find, fix, and verify exploitable attack vectors. We are a team of former U.S. Special Operations cyber operators and startup engineers, committed to respect, collaboration, ownership, and results.
Monitor, triage, and investigate security alerts across identity, endpoint, email, and cloud environments.
Own routine investigations through to documented outcomes: gather evidence, establish timelines, and explain conclusions.
Improve runbooks, tune detections, and contribute to automation and scripting to simplify workflows.
Samsara is the pioneer of the Connected Operations Cloud, helping organizations improve safety, efficiency, and sustainability of physical operations. As a recently public company, it fosters a culture of ownership, flexibility, and belonging, with a global team focused on long-term impact.
Provide Tier III SOC support for advanced security monitoring, incident investigation, and forensic analysis in federal environments.
Lead threat detection and analysis using SIEM, endpoint telemetry, and threat intelligence to identify malicious activity.
Mentor junior analysts and improve SOC processes through SOP development and incident response playbook updates.
True Zero Technologies is a veteran-owned small business that focuses on enabling people and technology to deliver high-quality outcomes. It has been recognized as a Best Places to Work honoree and made the Inc. 5000 list for multiple years, reflecting its people-first culture and sustained growth.
Designs and operates scalable security analytics platforms and telemetry pipelines.
Develops and tunes behavioral detections, correlation logic, dashboards, and alerting strategies.
Applies AI-assisted techniques to log analysis, anomaly detection, and investigation support.
Backblaze provides cloud storage and data backup services, offering secure and scalable solutions for individuals and businesses. The company values diversity, equity, and inclusion, and is committed to fostering a workforce where all employees feel a sense of belonging.