Build and operate the Security Observability & Data Platform: ingestion, normalization, retention, and query/detection at TB scale.
Own endpoint security across the fleet: EDR deployment, binary authorization, and hardening baselines with IT.
Lead threat hunting, incident response, and red-team exercises, and turn results into detections and fixes.
We build foundational infrastructure and products for web3, including the Sui blockchain and Move language. We are a remote-first, world-class team with tremendous growth potential, backed by a $300M Series B from top venture funds.
Monitor and evaluate agentic incidents, performing root-cause analysis across source alerts and pipelines to provide feedback to the AI team.
Define telemetry fields and contextual requirements for analyst-grade investigations, ensuring reliable data across detection surfaces.
Research and onboard telemetry from emerging security vendor APIs, mapping them into a unified security data model.
Zscaler accelerates digital transformation with its Zero Trust Exchange platform, protecting customers from cyberattacks and data loss. With thousands of customers and over 200 data centers globally, it fosters a culture of ownership, collaboration, and ongoing feedback.
Design and tune detections across cloud, identity, endpoint, and email using detection-as-code practices.
Lead incident response, maintain response plans, and conduct tabletop exercises.
Build AI agents and automation to reduce detection and response times.
We are a technology company delivering financing and software for sustainable solutions like solar panels and energy-efficient home improvements. We have served over 1 million homeowners and facilitated over $30 billion in financing since 2018, with a collaborative and rewarding culture.
Designs and operates scalable security analytics platforms and telemetry pipelines.
Develops and tunes behavioral detections, correlation logic, dashboards, and alerting strategies.
Applies AI-assisted techniques to log analysis, anomaly detection, and investigation support.
Backblaze provides cloud storage and data backup services, offering secure and scalable solutions for individuals and businesses. The company values diversity, equity, and inclusion, and is committed to fostering a workforce where all employees feel a sense of belonging.
Monitor, triage, and investigate security alerts across identity, endpoint, email, and cloud environments.
Own routine investigations through to documented outcomes: gather evidence, establish timelines, and explain conclusions.
Improve runbooks, tune detections, and contribute to automation and scripting to simplify workflows.
Samsara is the pioneer of the Connected Operations Cloud, helping organizations improve safety, efficiency, and sustainability of physical operations. As a recently public company, it fosters a culture of ownership, flexibility, and belonging, with a global team focused on long-term impact.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Provide tier 2 and 3 support to customers and collaborate with threat researchers to challenge detection engines.
Analyze huge web traffic data sets to identify and block malicious traffic, and create scripts to detect outliers.
Identify potential attacks and add new alerts to strengthen DataDome's real-time detection platform.
DataDome stops cyberfraud and bots in real time using a multi-layered AI engine built on intent analysis. The company is backed by a 24/7 SOC team and a multicultural R&D team, with a joyful workplace and many social events.
Analyze incoming threat intelligence, assess its credibility and relevance, and run IOC sweeps across our environment.
Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management.
Develop and test detection rules, build orchestration workflows, and automate triage, enrichment, and response using AI tools.
We build the market-leading enterprise password manager and pioneered Unified Access Management, trusted by over 180,000 businesses. We've surpassed $500M in ARR, made the Forbes Cloud 100, and nurture a remote-first, collaborative culture.
Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, and data-protection technologies.
Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider threat, and third-party events.
Conduct threat intelligence, threat hunting, and vulnerability management to prioritize and remediate risks.
Trupanion is a leading provider of medical insurance for cats and dogs in North America. We offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.
Handle escalations from level I Threat Analysts and train new team members in a 24/7 SOC environment.
Conduct security log monitoring, event detection, and response using endpoint and network security tools.
Research threat intelligence, create MDR reports, and interact with clients to neutralize cyber threats.
Sophos is a global leader in cybersecurity, providing advanced threat detection and response solutions. The company is a remote-first organization with a diverse and collaborative culture, committed to innovation and employee growth.
Lead advanced threat investigations and independent threat hunting across diverse customer environments.
Act as an escalation point for complex incident analysis and collaborate with SOC analysts on emerging threats.
Develop detection capabilities, refine hunting methods, and deliver clear incident reports to strengthen defenses.
They are a cybersecurity partner specializing in managed detection and response services. The organization fosters a high-performance, collaborative culture grounded in integrity, ownership, and customer focus.
Own endpoint detection and response across managed security customers.
Deploy, tune, and run EDR platforms such as CrowdStrike Falcon, Microsoft Defender, and SentinelOne.
Manage SIEM pipelines and build API integrations to keep telemetry healthy.
Legato Security is an information security firm that helps organizations keep data private and secure, acting as trusted advisors to build proactive security plans. It is a start-up in a growth phase with a start-up culture and an office in downtown Salt Lake City, UT.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.
Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.
Build and own detections across AWS, EDR, identity, SaaS, and AI gateway to manage coverage, precision, and latency.
Own the security log pipeline as a product, ensuring audit and security logs land centrally for triage and incident response.
Extend detection coverage to agentic AI products, identifying anomalous behavior like prompt injection and data exfiltration.
Angi powers the future of the home services industry, connecting homeowners with skilled pros for home projects. Founded in 1995 as Angie’s List, the company has grown to 9 brands in 8 countries with employees worldwide, emphasizing a culture of sharp, motivated teammates and diversity.
Monitor, triage, and resolve security alerts in Microsoft Defender XDR and Sentinel.
Lead incident response end-to-end and maintain ISO 27001 documentation and audits.
Administer IAM, PAM, and patch management to enforce least privilege and compliance.
Appen is a leader in AI training data, specializing in human-generated data to train, fine-tune, and evaluate models across generative AI, LLMs, computer vision, and speech. With over 1 million contributors in more than 200 countries, the company fosters a culture of innovation, collaboration, and humility.
Handle escalations from Level I analysts and guide on investigation handling.
On-board new threat analysts and participate in process improvement.
Conduct detection and response to security events and maintain security metrics.
Sophos is a global cybersecurity company specializing in managed detection and response services. With a remote-first culture and a global team, the company values diversity and collaboration.
Investigate security incidents using digital forensics and data analysis.
Build automation and detection models to identify unusual activity at scale.
Lead complex investigations with Legal, Privacy, and Engineering partners.
This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.
Lead rapid-response research into emerging threats, actively hunt across telemetry, and produce time-sensitive intelligence assessments.
Correlate endpoint, network, cloud, and identity data to develop campaign hypotheses and scope widespread adversary activity.
Develop operational detections using YARA, Sigma, and analytics, and publish high-quality research for internal and external audiences.
Arctic Wolf is a global leader in security operations, helping organizations stay resilient against evolving cyber threats. With over 3,000 Pack members worldwide, the company fosters a collaborative culture where talented people can do meaningful work.
Lead detection and response strategy for Apollo's Security team, building detection systems and response automations hands-on.
Own detection architecture, security observability, and incident response readiness across cloud and SaaS environments.
Drive AI-augmented detection and response, measuring gains in speed, coverage, and signal quality.
Apollo.io is a leading go-to-market platform for revenue teams, providing verified contact data and engagement tools for over 500,000 companies. Founded in 2015, it has raised ~$250M, is valued at $1.6B, and fosters an AI-native culture of continuous improvement.