Own endpoint detection and response across managed security customers.
Deploy, tune, and run EDR platforms such as CrowdStrike Falcon, Microsoft Defender, and SentinelOne.
Manage SIEM pipelines and build API integrations to keep telemetry healthy.
Legato Security is an information security firm that helps organizations keep data private and secure, acting as trusted advisors to build proactive security plans. It is a start-up in a growth phase with a start-up culture and an office in downtown Salt Lake City, UT.
Lead enterprise-scale security deployments using Microsoft Sentinel and Defender XDR.
Design advanced detection, automation, and reporting to improve threat visibility.
Mentor engineers and deliver technical leadership across complex customer projects.
This cybersecurity engineering partner helps organizations strengthen defenses against sophisticated digital threats using Microsoft Sentinel, Defender XDR, and Azure. It is a mission-driven, collaborative environment focused on innovation, technical leadership, and professional growth.
Lead advanced threat investigations and independent threat hunting across diverse customer environments.
Act as an escalation point for complex incident analysis and collaborate with SOC analysts on emerging threats.
Develop detection capabilities, refine hunting methods, and deliver clear incident reports to strengthen defenses.
They are a cybersecurity partner specializing in managed detection and response services. The organization fosters a high-performance, collaborative culture grounded in integrity, ownership, and customer focus.
Lead remote implementation and optimization of Microsoft Sentinel and Defender solutions.
Develop detection rules, automation, and reporting to improve threat visibility.
Collaborate with customers and internal teams to deliver scalable security outcomes.
Our partner is a cybersecurity engineering organization that helps companies protect against increasingly sophisticated digital threats. They foster a collaborative and innovative culture, with a team of cybersecurity specialists and technical professionals focused on delivering measurable security impact.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Build and operate the Security Observability & Data Platform: ingestion, normalization, retention, and query/detection at TB scale.
Own endpoint security across the fleet: EDR deployment, binary authorization, and hardening baselines with IT.
Lead threat hunting, incident response, and red-team exercises, and turn results into detections and fixes.
We build foundational infrastructure and products for web3, including the Sui blockchain and Move language. We are a remote-first, world-class team with tremendous growth potential, backed by a $300M Series B from top venture funds.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Triage MDR alerts and analyze security events in a 24x7 SOC environment.
Approve escalations, create playbooks, and verify protection actions.
Communicate with clients on high-severity incidents and act as an SME.
Critical Start is a cybersecurity company providing 24x7 AI-driven detection and response across IT and OT. The team is collaborative, high-trust, and casual, with a focus on innovation.
Investigate security incidents using digital forensics and data analysis.
Build automation and detection models to identify unusual activity at scale.
Lead complex investigations with Legal, Privacy, and Engineering partners.
This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.
Strengthen identity security and manage security tools including Microsoft Entra ID, Defender XDR, and Sentinel.
Own vulnerability management, incident response, and third-party vendor security risk programs.
Align security program with NIST CSF 2.0, CIS Controls, and SOC 2 Type II audits.
BCC Software develops innovative software and data solutions that power critical customer communications for organizations across North America. With more than 45 years of industry leadership, they combine deep postal expertise with modern technology to help customers streamline operations and improve efficiency.
Operate the agentic SOC by supervising AI-driven triage, validating outputs, and making incident response decisions.
Build, test, and deploy automations, agent workflows, and integrations across security platforms.
Govern and measure agent performance, enforce guardrails, and support the 24/7 security team with clean handoffs.
HealthEquity is a healthcare financial technology company that empowers consumers to save and improve lives through HSA and benefits solutions. They protect the financial and health information of millions of members and foster a culture of remarkable teamwork, authenticity, and a focus on connecting health and wealth.
Monitor all IT applications and coordinate incident resolution on a 24x7x365 team.
Manage monitoring tools, create runbooks, and ensure SLAs for maintenance notifications.
Support CI/CD pipelines, SSL/TLS certificates, and security vulnerability patching.
Experian is a global data and technology company powering opportunities across markets like financial services, healthcare, and automotive. We have an amazing team of 25,200 people in 32 countries with a people-first, inclusive culture.
Monitor and maintain multiple SIEM environments, including Microsoft Sentinel and Splunk.
Configure data sources, log forwarders, and create custom dashboards, workbooks, and alerts.
Collaborate with clients to mature their SIEM security programs and provide technical guidance.
Critical Start delivers 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. They foster a collaborative, high-trust culture with casual dress, games, and a focus on innovation.
Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.
Manage and continuously improve application allowlisting controls across company-managed devices.
Balance strong security enforcement with operational efficiency and a smooth user experience.
Contribute to automation, documentation, and audit readiness while developing endpoint security expertise.
They are a mission-driven organization focused on expanding educational and career opportunities. They maintain a collaborative, remote-first culture with an emphasis on technical excellence, accountability, and continuous improvement.
Coordinate and manage Major Incident process activities, including Sev1 and Sev2 incidents.
Communicate with internal and customer stakeholders on status, resolution, and success criteria.
Partner with Problem Management on RCA process and create Technical Action Plans.
HealthEdge offers AI-powered operational infrastructure for health insurance companies, helping them modernize operations and compete effectively. The company is experiencing strong market momentum and is investing in its people as it expands.
Monitor and triage alerts from security tools including SIEM, EDR/XDR, firewalls, and email security.
Assist with identity and access management, vulnerability scanning, and incident response activities.
Support security awareness initiatives and collaborate with IT teams and the MSSP to resolve security issues.
Make-A-Wish America is a nonprofit organization that grants life-changing wishes to children with critical illnesses. It is the world's largest wish-granting organization, fostering a community-focused and inclusive workplace.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Oversee a team of cybersecurity professionals handling monitoring, triage, investigation, and incident response.
Act as the primary escalation point for complex investigations and coordinate with customers and internal teams.
Recruit, onboard, and develop MDR Security Analysts while driving continuous service improvement.
They provide managed detection and response (MDR) services to protect customer data through continuous monitoring, threat detection, and incident response. They operate in a global, 24/7 security operations environment with a collaborative, accountable team culture.
Manage a global 24/7 Security Operations Center, defining and streamlining processes, workflows, and playbooks.
Lead and mentor a team of security analysts through weekly 1:1s, feedback, and career growth initiatives.
Collaborate with product, support, and security teams to scale operations and operationalize new technologies.
Huntress is a remote-first cybersecurity company founded in 2015 by former NSA cyber operators, providing enterprise-grade security to businesses of all sizes. It secures over 5 million endpoints and 16 million identities worldwide with a 24/7 human-led Security Operations Center.