Build AI agents and LLM-assisted workflows to triage, enrich, and resolve security alerts.
Develop and maintain security data pipelines that collect, normalize, and route telemetry.
Collaborate with Cyber Operations to automate manual steps and document decision paths.
HealthEquity empowers healthcare consumers by providing HSAs and related financial solutions. The company fosters a collaborative, purpose-driven culture and values authenticity and innovation.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Design, develop, and maintain reusable security automation components, integrations, and playbooks.
Integrate SIEM, SOAR, EDR, vulnerability management, and threat intelligence platforms with AI-driven workflows.
Apply software engineering best practices and collaborate across teams to deliver production-ready security solutions.
This role is for a client in the technology, information, and media sector, focused on security automation and cybersecurity solutions. The team environment is product-focused, fast-paced, and emphasizes collaboration and engineering excellence.
Deliver end-to-end threat intelligence enablement and technical onboarding, optimizing customer digital footprints and alert rules for noise-free monitoring.
Develop custom automation scripts, AI agents, and SOAR playbooks to streamline security workflows and enhance platform adoption.
Drive customer retention through proactive engagement, churn risk analysis, and adaptive threat reporting.
SOCRadar provides Extended Threat Intelligence (XTI) solutions that help organizations proactively secure their attack surfaces and gain visibility into surface, deep, and dark web threats. The company is focused on innovation, global expansion, and delivering automation-enabled security to enterprises worldwide.
Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.
Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.
Monitor and maintain multiple SIEM environments, including Microsoft Sentinel and Splunk.
Configure data sources, log forwarders, and create custom dashboards, workbooks, and alerts.
Collaborate with clients to mature their SIEM security programs and provide technical guidance.
Critical Start delivers 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. They foster a collaborative, high-trust culture with casual dress, games, and a focus on innovation.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Own the SaaS Security function end-to-end, including tooling strategy, deployment, and administration.
Serve as the Cyber Defense representative on the SOC floor during core business hours.
Partner across IT, engineering, and business teams to secure HealthEquity's SaaS footprint.
HealthEquity empowers healthcare consumers to save, spend, and grow their healthcare dollars through HSAs and related financial solutions. It is a mission-driven organization with a large, collaborative workforce that values inclusion, innovation, and whole-person health.
Lead security incident response end-to-end across cloud, identity, and workload logs.
Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
Automate detection and response tasks using Python and Terraform, and mentor engineers.
Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.
Execute end-to-end platform deployments across Google SecOps and Microsoft Sentinel for new customers.
Onboard log sources, configure data connectors, and validate ingestion pipelines.
Train customers on their deployed platform and document handoff notes for ongoing support.
TENEX is an AI-native, automation-first Managed Detection and Response (MDR) provider that combines cutting-edge AI with human expertise to deliver security operations. It is a fast-growing startup backed by top-tier investors, with a mission-driven and customer-obsessed culture.
Own endpoint detection and response across managed security customers.
Deploy, tune, and run EDR platforms such as CrowdStrike Falcon, Microsoft Defender, and SentinelOne.
Manage SIEM pipelines and build API integrations to keep telemetry healthy.
Legato Security is an information security firm that helps organizations keep data private and secure, acting as trusted advisors to build proactive security plans. It is a start-up in a growth phase with a start-up culture and an office in downtown Salt Lake City, UT.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Triage MDR alerts and analyze security events in a 24x7 SOC environment.
Approve escalations, create playbooks, and verify protection actions.
Communicate with clients on high-severity incidents and act as an SME.
Critical Start is a cybersecurity company providing 24x7 AI-driven detection and response across IT and OT. The team is collaborative, high-trust, and casual, with a focus on innovation.
Lead detection and response strategy for Apollo's Security team, building detection systems and response automations hands-on.
Own detection architecture, security observability, and incident response readiness across cloud and SaaS environments.
Drive AI-augmented detection and response, measuring gains in speed, coverage, and signal quality.
Apollo.io is a leading go-to-market platform for revenue teams, providing verified contact data and engagement tools for over 500,000 companies. Founded in 2015, it has raised ~$250M, is valued at $1.6B, and fosters an AI-native culture of continuous improvement.
Design and build security solutions across application security, infrastructure, and AI agentic systems.
Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
Develop AI governance standards and security review agents to protect user trust.
Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.
Design and deliver automation workflows that help security analysts detect, investigate, and remediate threats faster.
Architect deterministic and agentic automation pipelines integrating services, scripting, orchestration, and security data enrichment.
Provide technical leadership, mentor engineers, and improve service reliability through monitoring, observability, and on-call support.
They build and operate Falcon Complete, a managed detection and response platform that protects organizations from cyber threats. They are a globally distributed, remote-first team focused on collaboration, innovation, and engineering excellence.
Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.
Build and maintain first-party integration connectors between NodeZero and customer security platforms like CrowdStrike, SentinelOne, and Splunk.
Design integration schemas and data mappings, and write documentation that enables customers to configure integrations without support calls.
Diagnose and resolve integration failures, working with the Integrations Platform team to ensure connectors are built on shared infrastructure.
Horizon3 is a cybersecurity company that provides autonomous pentesting through its NodeZero platform to help organizations proactively find and fix attack vectors. The company is a remote team of former U.S. Special Operations cyber operators and engineers, fostering a culture of respect, collaboration, and ownership.
Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.