Lead OT incident response engagements for industrial customers, including investigations, threat hunts, and compromise assessments.
Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing response communications.
Deliver advisory services like IR planning workshops and maturity assessments, while mentoring teammates and improving methodologies.
Dragos is a global leader in OT cybersecurity, protecting critical infrastructure through technology, threat intelligence, and expert services. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC.
Direct and manage multiple work streams and resources during and after incident response and recovery engagements, including forensic imaging, breach containment, and infrastructure recovery.
Interface with external agency IR functions, third-party contractors, law firms, and customer leadership to coordinate a unified response to security incidents.
Collaborate with Security Operations and Engineering leaders to evaluate service offerings, build client relationships, and advise on security risks and mitigation strategies.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. Named one of the Washington Business Journal's Best Places to Work every year since 2014, Valiant is known for its employee-centric culture and commitment to excellence.
Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.
Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.
Lead incident response operations, including prioritization, resource allocation, shift coverage, and escalation processes.
Oversee cyber incidents from escalation through containment, remediation, recovery, and closure, serving as Incident Commander for significant events.
Supervise team performance, develop personnel, and communicate incident status and risks to executives and business stakeholders.
NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing world-class content across film, television, streaming, and global theme parks. As a subsidiary of Comcast Corporation, the company operates a vast portfolio of iconic brands and fosters an inclusive culture that encourages employees to serve their communities.
Lead investigative execution of active cyber incidents for MDR customers and MSPs.
Work directly with customers to investigate, contain, and support remediation.
Mentor incident response analysts and provide technical guidance.
Sophos is a leading cybersecurity company focused on protecting organizations from cyber threats. As a remote-first company, they emphasize collaboration across global teams and are committed to diversity and inclusion.
Lead and mentor a team of Incident Response analysts during active security incidents.
Serve as the primary customer-facing lead during investigations and crisis situations.
Coordinate incident triage, containment, eradication, and recovery efforts.
Check Point protects over 100,000 organizations worldwide from cyber and AI-driven threats with a prevention-first approach. Recognized by TIME, Newsweek, and Forbes, the company fosters a culture of smart, curious people who take ownership and solve complex problems.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Lead 24x7x365 incident coordination for escalated cyber threats, ensuring situational awareness and timely resolution.
Direct advanced incident response, including containment, remediation, recovery, and stakeholder communication.
Use Splunk SIEM, Microsoft Defender, and Cortex XSOAR to analyze security events and drive investigations.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the best places to work in the Washington DC area for 12 consecutive years, Valiant prides itself on an employee-centric culture and commitment to excellence.
Lead ICS/OT cyber threat intelligence efforts for an Australian customer, driving threat hunts and shaping government strategy.
Analyze network traffic and industrial protocols to surface anomalies using tools like Dragos Platform and Synapse.
Translate technical findings into MITRE ATT&CK for ICS mappings and deliver actionable intelligence to non-technical stakeholders.
Dragos is a global leader in operational technology (OT) cybersecurity, protecting critical infrastructure like water, power, and hospitals from cyber threats. The company has a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.
Utilize Sophos technologies to investigate, contain, and respond to cyber incidents for MDR customers and MSPs.
Mentor incident response analysts and provide technical guidance, review, and escalation support.
Perform advanced incident response analysis to identify initial access, persistence, and lateral movement to contain and remediate threats.
Sophos is a cybersecurity company providing advanced threat detection and response solutions. The company supports a diverse and inclusive workforce with flexible working arrangements, including remote roles.
Lead and develop squads of analysts across the Critical Incident Response Team, setting clear expectations and building an inclusive culture.
Own day-to-day CIRT operations, provide senior escalation, and act as Incident Commander for complex incidents.
Use metrics and feedback to drive continuous improvement and partner cross-functionally to strengthen MDR response.
Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services, including MDR and a portfolio of security technologies. It fosters a remote-first culture with employee-led diversity networks and a global partner ecosystem.
Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.
Serve as a trusted advisor for critical infrastructure clients across Europe, maximizing value from Dragos solutions.
Lead customer onboarding, adoption, and technical enablement to operationalize OT security use cases.
Collaborate with internal teams to represent the voice of the customer and shape product innovation.
Dragos is a global leader in operational technology (OT) cybersecurity, protecting critical infrastructure through technology, threat intelligence, and expert services. It's a remote-first, mission-driven team across the globe, built on authenticity, transparency, and trust.
Plan, scope, and implement the Dragos Platform in customer environments, including onsite work at power plants, substations, and refineries.
Collaborate with client teams on network architecture, sensor placement, and integrations, tuning and optimizing the platform for customer objectives.
Provide training, troubleshooting, and ongoing support to ensure continuous platform availability and customer success.
Dragos is a global leader in operational technology (OT) cybersecurity, combining technology, threat intelligence, and expert services. It is a remote-first, mission-driven company with a team across North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.
Lead Affirm's global security investigations and incident response program across the full lifecycle.
Serve as incident commander for major events, coordinating technical and cross-functional response.
Drive improvements to response tooling, detection, and AI-enabled investigation workflows.
Affirm builds honest financial products that let people pay over time with clear, predictable terms. We are a remote-first fintech company with a team-first culture focused on security, innovation, and long-term success.
Investigate, contain, and remediate cybersecurity incidents across customer environments.
Conduct digital forensics, malware analysis, and threat intelligence to identify attacker techniques.
Collaborate with security operations and threat hunting teams to improve detection and response.
A cybersecurity company that provides incident response and digital forensics services to customers facing security threats. The team works remotely in a 24/7 security operations environment with a focus on collaboration and continuous improvement.
Maintain oversight of threat analysts and manage daily Security Operations Center activities.
Lead incident response and investigation to determine root cause and resolution.
Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.
Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.
Lead OT assessments and advisory engagements as primary technical lead.
Apply deep OT and cybersecurity expertise to evaluate ICS architectures.
Lead technical teams and contribute to business development.
AHEAD helps organizations modernize and secure their technology infrastructure. The company prioritizes a culture of belonging and is an equal opportunity employer.
Conduct in-person and remote product demonstrations and articulate the technical value of Dragos products and offerings.
Participate in pre/post sales process to understand customer business outcomes and execute Proofs of Concept.
Offer consultative recommendations to customers and prospects throughout their ICS cybersecurity journey.
Dragos is the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services to protect critical infrastructure. They are a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust.
Build strong customer relationships and act as a trusted advisor for Dragos Platform adoption.
Resolve technical challenges, conduct health checks, and ensure successful ongoing deployments.
Provide product recommendations, track key metrics, and collaborate with internal teams to improve offerings.
Dragos is a global leader in operational technology (OT) cybersecurity, combining technology, threat intelligence, and expert services to protect critical infrastructure. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.