Analyze incoming threat intelligence, assess its credibility and relevance, and run IOC sweeps across our environment.
Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management.
Develop and test detection rules, build orchestration workflows, and automate triage, enrichment, and response using AI tools.
We build the market-leading enterprise password manager and pioneered Unified Access Management, trusted by over 180,000 businesses. We've surpassed $500M in ARR, made the Forbes Cloud 100, and nurture a remote-first, collaborative culture.
Deliver end-to-end threat intelligence enablement and technical onboarding, optimizing customer digital footprints and alert rules for noise-free monitoring.
Develop custom automation scripts, AI agents, and SOAR playbooks to streamline security workflows and enhance platform adoption.
Drive customer retention through proactive engagement, churn risk analysis, and adaptive threat reporting.
SOCRadar provides Extended Threat Intelligence (XTI) solutions that help organizations proactively secure their attack surfaces and gain visibility into surface, deep, and dark web threats. The company is focused on innovation, global expansion, and delivering automation-enabled security to enterprises worldwide.
Leverage your sysadmin background to set up research environments, manage lab infrastructure, and ensure tooling stability.
Assist in simulating threats (Red) while documenting detection gaps and defensive improvements (Blue).
Perform data collection, log analysis, and initial vulnerability triaging to support Senior Researchers.
Cobalt is a leading provider of penetration testing as a service, connecting businesses with a global network of security researchers. The company fosters a passionate, rapidly expanding culture with mentorship and growth opportunities.
Monitor, triage, and investigate security alerts across identity, endpoint, email, and cloud environments.
Own routine investigations through to documented outcomes: gather evidence, establish timelines, and explain conclusions.
Improve runbooks, tune detections, and contribute to automation and scripting to simplify workflows.
Samsara is the pioneer of the Connected Operations Cloud, helping organizations improve safety, efficiency, and sustainability of physical operations. As a recently public company, it fosters a culture of ownership, flexibility, and belonging, with a global team focused on long-term impact.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Operate the agentic SOC by supervising AI-driven triage, validating outputs, and making incident response decisions.
Build, test, and deploy automations, agent workflows, and integrations across security platforms.
Govern and measure agent performance, enforce guardrails, and support the 24/7 security team with clean handoffs.
HealthEquity is a healthcare financial technology company that empowers consumers to save and improve lives through HSA and benefits solutions. They protect the financial and health information of millions of members and foster a culture of remarkable teamwork, authenticity, and a focus on connecting health and wealth.
Own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities.
Develop and tune detections, maintain operational dashboards, and automate response actions.
Support security incidents, gather evidence, and participate in the on-call rotation.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. We are a diverse team of 400+ globally distributed members who value curiosity, empathy, and accountability.
Build AI agents and LLM-assisted workflows to triage, enrich, and resolve security alerts.
Develop and maintain security data pipelines that collect, normalize, and route telemetry.
Collaborate with Cyber Operations to automate manual steps and document decision paths.
HealthEquity empowers healthcare consumers by providing HSAs and related financial solutions. The company fosters a collaborative, purpose-driven culture and values authenticity and innovation.
Design and deploy SIEM architectures across on-prem, virtual, and cloud environments.
Create custom correlation rules and SOAR playbooks to address client-specific threats.
Mentor junior consultants and serve as technical advisor for complex SIEM/SOAR deployments.
AHEAD builds platforms for digital business by weaving advances in cloud, automation, analytics, and software delivery to help enterprises deliver on digital transformation. They prioritize a culture of belonging and invest in top-notch technologies for employee growth.
Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.
Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Provide tier 2 and 3 support to customers and collaborate with threat researchers to challenge detection engines.
Analyze huge web traffic data sets to identify and block malicious traffic, and create scripts to detect outliers.
Identify potential attacks and add new alerts to strengthen DataDome's real-time detection platform.
DataDome stops cyberfraud and bots in real time using a multi-layered AI engine built on intent analysis. The company is backed by a 24/7 SOC team and a multicultural R&D team, with a joyful workplace and many social events.
Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.
Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.
Lead the build-out of key insider threat workstreams from design to operation.
Support insider risk investigations with telemetry, evidence analysis, and written findings.
Partner with Legal, HR, Privacy, and Compliance on case handling and escalation criteria.
Affirm provides buy now, pay later payment solutions that are transparent and free of hidden fees. As a remote-first fintech company, it prioritizes care, flexibility, and security for its employees and customers.
Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.
Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.
Design and tune detections across cloud, identity, endpoint, and email using detection-as-code practices.
Lead incident response, maintain response plans, and conduct tabletop exercises.
Build AI agents and automation to reduce detection and response times.
We are a technology company delivering financing and software for sustainable solutions like solar panels and energy-efficient home improvements. We have served over 1 million homeowners and facilitated over $30 billion in financing since 2018, with a collaborative and rewarding culture.
Monitor customer environments using security technologies to triage alerts and identify potential threats.
Escalate confirmed threats with actionable reports to appropriate channels.
Document investigations thoroughly and communicate outstanding items to incoming shifts for continuity.
Nightwing provides full-spectrum cyber, data operations, systems integration, and intelligence mission support services to intelligence, defense, civil, and commercial markets. Previously part of a Fortune 100 company and headquartered in Dulles, VA, Nightwing became independent in 2024 and continues to support mission-impactful initiatives with a team of dedicated professionals.
Triage and escalate security alerts across SIEM, EDR/XDR, WAF, email, and cloud sources while coordinating with an MSSP.
Own incidents end-to-end, documenting playbooks and updating detection logic so risk is actually reduced.
Develop and validate SIEM detection rules (ES|QL/EQL/KQL) and support building an insider threat monitoring program.
BTSE Group is a global leader in fintech and blockchain technology, providing white-label exchange and payment solutions, custody, wallets, and blockchain integration. They serve over 100 corporate clients worldwide and foster a lean, high-ownership security culture.
Develop tools and automation to accelerate Threat Research and Detection Engineering.
Build and support internal systems including deployment pipelines, threat intelligence ingestion, and on-demand research labs.
Work with network data to emulate adversary behavior and collaborate with a seasoned engineering team.
ExtraHop reveals what is happening in the very infrastructure that sustains businesses, ensuring network security and performance. With a culture rooted in integrity, innovation, and collaboration, the company is a leader in Network Detection and Response (NDR).