Own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities.
Develop and tune detections, maintain operational dashboards, and automate response actions.
Support security incidents, gather evidence, and participate in the on-call rotation.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. We are a diverse team of 400+ globally distributed members who value curiosity, empathy, and accountability.
Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.
Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.
Design and tune detections across cloud, identity, endpoint, and email using detection-as-code practices.
Lead incident response, maintain response plans, and conduct tabletop exercises.
Build AI agents and automation to reduce detection and response times.
We are a technology company delivering financing and software for sustainable solutions like solar panels and energy-efficient home improvements. We have served over 1 million homeowners and facilitated over $30 billion in financing since 2018, with a collaborative and rewarding culture.
Build and operate the Security Observability & Data Platform: ingestion, normalization, retention, and query/detection at TB scale.
Own endpoint security across the fleet: EDR deployment, binary authorization, and hardening baselines with IT.
Lead threat hunting, incident response, and red-team exercises, and turn results into detections and fixes.
We build foundational infrastructure and products for web3, including the Sui blockchain and Move language. We are a remote-first, world-class team with tremendous growth potential, backed by a $300M Series B from top venture funds.
Monitor, triage, and investigate security alerts across identity, endpoint, email, and cloud environments.
Own routine investigations through to documented outcomes: gather evidence, establish timelines, and explain conclusions.
Improve runbooks, tune detections, and contribute to automation and scripting to simplify workflows.
Samsara is the pioneer of the Connected Operations Cloud, helping organizations improve safety, efficiency, and sustainability of physical operations. As a recently public company, it fosters a culture of ownership, flexibility, and belonging, with a global team focused on long-term impact.
Operate the agentic SOC by supervising AI-driven triage, validating outputs, and making incident response decisions.
Build, test, and deploy automations, agent workflows, and integrations across security platforms.
Govern and measure agent performance, enforce guardrails, and support the 24/7 security team with clean handoffs.
HealthEquity is a healthcare financial technology company that empowers consumers to save and improve lives through HSA and benefits solutions. They protect the financial and health information of millions of members and foster a culture of remarkable teamwork, authenticity, and a focus on connecting health and wealth.
Design and deploy SIEM architectures across on-prem, virtual, and cloud environments.
Create custom correlation rules and SOAR playbooks to address client-specific threats.
Mentor junior consultants and serve as technical advisor for complex SIEM/SOAR deployments.
AHEAD builds platforms for digital business by weaving advances in cloud, automation, analytics, and software delivery to help enterprises deliver on digital transformation. They prioritize a culture of belonging and invest in top-notch technologies for employee growth.
Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.
Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.
Analyze EDR telemetry and log sources across Endpoint, Identity, Network, and Cloud domains to identify and publish threats.
Improve Detection Operations workflow through orchestration and automation to manage high volumes of telemetry.
Convey key indicators and remediation context with concise, actionable communication to customers at scale.
Zscaler (NASDAQ: ZS) accelerates digital transformation with a Zero Trust Exchange platform that secures connections for thousands of customers worldwide. With 200+ data centers and an AI-native focus, Zscaler fosters a culture of ownership, collaboration, and continuous feedback.
Monitor and evaluate agentic incidents, performing root-cause analysis across source alerts and pipelines to provide feedback to the AI team.
Define telemetry fields and contextual requirements for analyst-grade investigations, ensuring reliable data across detection surfaces.
Research and onboard telemetry from emerging security vendor APIs, mapping them into a unified security data model.
Zscaler accelerates digital transformation with its Zero Trust Exchange platform, protecting customers from cyberattacks and data loss. With thousands of customers and over 200 data centers globally, it fosters a culture of ownership, collaboration, and ongoing feedback.
Monitor and maintain multiple SIEM environments, including Microsoft Sentinel and Splunk.
Configure data sources, log forwarders, and create custom dashboards, workbooks, and alerts.
Collaborate with clients to mature their SIEM security programs and provide technical guidance.
Critical Start delivers 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. They foster a collaborative, high-trust culture with casual dress, games, and a focus on innovation.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Monitor and triage security alerts across SIEM, endpoint, email, identity, and access systems.
Investigate phishing, malware, suspicious logins, and security events, documenting findings.
Build automations and AI-assisted workflows to reduce manual work and improve operational efficiency.
Magnet Forensics is a global leader in digital investigative software that acquires, analyzes, and shares evidence from computers, smartphones, tablets, and IoT-related devices. With employees around the world, the company is expanding and fosters a culture of learning, innovation, and integrity.
Provide security support for infrastructure and end-user systems, including macOS endpoints and cloud environments.
Manage AI governance, vulnerability management, and endpoint security across a global remote team.
Handle vendor security assessments, audit observations, and third-party app reviews.
Gurobi Optimization empowers customers to expand their use of mathematical optimization technology for smarter decision-making. They are a small company with employees across 16 countries, fostering a collaborative and innovative culture.
Build and own detections across AWS, EDR, identity, SaaS, and AI gateway to manage coverage, precision, and latency.
Own the security log pipeline as a product, ensuring audit and security logs land centrally for triage and incident response.
Extend detection coverage to agentic AI products, identifying anomalous behavior like prompt injection and data exfiltration.
Angi powers the future of the home services industry, connecting homeowners with skilled pros for home projects. Founded in 1995 as Angie’s List, the company has grown to 9 brands in 8 countries with employees worldwide, emphasizing a culture of sharp, motivated teammates and diversity.
Triage and escalate security alerts across SIEM, EDR/XDR, WAF, email, and cloud sources while coordinating with an MSSP.
Own incidents end-to-end, documenting playbooks and updating detection logic so risk is actually reduced.
Develop and validate SIEM detection rules (ES|QL/EQL/KQL) and support building an insider threat monitoring program.
BTSE Group is a global leader in fintech and blockchain technology, providing white-label exchange and payment solutions, custody, wallets, and blockchain integration. They serve over 100 corporate clients worldwide and foster a lean, high-ownership security culture.
Lead the build-out of key insider threat workstreams from design to operation.
Support insider risk investigations with telemetry, evidence analysis, and written findings.
Partner with Legal, HR, Privacy, and Compliance on case handling and escalation criteria.
Affirm provides buy now, pay later payment solutions that are transparent and free of hidden fees. As a remote-first fintech company, it prioritizes care, flexibility, and security for its employees and customers.
Build AI agents and LLM-assisted workflows to triage, enrich, and resolve security alerts.
Develop and maintain security data pipelines that collect, normalize, and route telemetry.
Collaborate with Cyber Operations to automate manual steps and document decision paths.
HealthEquity empowers healthcare consumers by providing HSAs and related financial solutions. The company fosters a collaborative, purpose-driven culture and values authenticity and innovation.
Build backend services and data pipelines for customer-facing security features.
Integrate machine learning models and large language models into detection and investigation workflows.
Develop AI agents that analyze suspicious activity and support security investigations.
Abnormal protects enterprises from AI-powered cybercrime using a behavioral AI platform. Over 5,000 enterprises trust the company, which has been recognized as a top cybersecurity startup and protects 15% of the Fortune 500.