Provide Tier III SOC support for advanced security monitoring, incident investigation, and forensic analysis in federal environments.
Lead threat detection and analysis using SIEM, endpoint telemetry, and threat intelligence to identify malicious activity.
Mentor junior analysts and improve SOC processes through SOP development and incident response playbook updates.
True Zero Technologies is a veteran-owned small business that focuses on enabling people and technology to deliver high-quality outcomes. It has been recognized as a Best Places to Work honoree and made the Inc. 5000 list for multiple years, reflecting its people-first culture and sustained growth.
Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.
Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.
Maintain oversight of threat analysts and manage daily Security Operations Center activities.
Lead incident response and investigation to determine root cause and resolution.
Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.
Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.
Lead and develop squads of analysts across the Critical Incident Response Team, setting clear expectations and building an inclusive culture.
Own day-to-day CIRT operations, provide senior escalation, and act as Incident Commander for complex incidents.
Use metrics and feedback to drive continuous improvement and partner cross-functionally to strengthen MDR response.
Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services, including MDR and a portfolio of security technologies. It fosters a remote-first culture with employee-led diversity networks and a global partner ecosystem.
Provide senior incident response and breach management for institutions of higher education handling federal data.
Conduct cybersecurity compliance assessments and evaluate safeguards against NIST SP 800-61 Rev. 3.
Coordinate remediation, track cases through closure, and deliver actionable recommendations to stakeholders.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers. It is a multi-year Washington Business Journal Best Places to Work winner with an employee-centric culture and a distributed workforce.
Lead 24x7x365 incident coordination for escalated cyber threats, ensuring situational awareness and timely resolution.
Direct advanced incident response, including containment, remediation, recovery, and stakeholder communication.
Use Splunk SIEM, Microsoft Defender, and Cortex XSOAR to analyze security events and drive investigations.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the best places to work in the Washington DC area for 12 consecutive years, Valiant prides itself on an employee-centric culture and commitment to excellence.
Lead incident response operations, including prioritization, resource allocation, shift coverage, and escalation processes.
Oversee cyber incidents from escalation through containment, remediation, recovery, and closure, serving as Incident Commander for significant events.
Supervise team performance, develop personnel, and communicate incident status and risks to executives and business stakeholders.
NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing world-class content across film, television, streaming, and global theme parks. As a subsidiary of Comcast Corporation, the company operates a vast portfolio of iconic brands and fosters an inclusive culture that encourages employees to serve their communities.
Direct and manage multiple work streams and resources during and after incident response and recovery engagements, including forensic imaging, breach containment, and infrastructure recovery.
Interface with external agency IR functions, third-party contractors, law firms, and customer leadership to coordinate a unified response to security incidents.
Collaborate with Security Operations and Engineering leaders to evaluate service offerings, build client relationships, and advise on security risks and mitigation strategies.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. Named one of the Washington Business Journal's Best Places to Work every year since 2014, Valiant is known for its employee-centric culture and commitment to excellence.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Operate the agentic SOC by supervising AI-driven triage, validating outputs, and making incident response decisions.
Build, test, and deploy automations, agent workflows, and integrations across security platforms.
Govern and measure agent performance, enforce guardrails, and support the 24/7 security team with clean handoffs.
HealthEquity is a healthcare financial technology company that empowers consumers to save and improve lives through HSA and benefits solutions. They protect the financial and health information of millions of members and foster a culture of remarkable teamwork, authenticity, and a focus on connecting health and wealth.
Own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities.
Develop and tune detections, maintain operational dashboards, and automate response actions.
Support security incidents, gather evidence, and participate in the on-call rotation.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. We are a diverse team of 400+ globally distributed members who value curiosity, empathy, and accountability.
Independently monitor and analyze security events across networks, systems, cloud platforms, and SaaS applications.
Manage vulnerability scanning, incident response, and remediation tracking through closure.
Administer security controls and support compliance audits under frameworks like NIST 800-171 and CMMC.
Kairos Power is a new nuclear energy technology and engineering company commercializing fluoride-salt-cooled, high-temperature reactors for clean energy. They are an equal opportunity employer building a diverse workforce and rewarding employees with competitive compensation and benefits.
Design, implement, and maintain the Security Operations Center (SOC) and related ISMS processes.
Manage incident response, threat intelligence, vulnerability management, and patch management.
Lead and develop the SOC team, ensuring continuous improvement of security operations.
ELEKS is a software development company providing custom solutions and services. With a global team of over 2,000 professionals, they foster a culture of innovation and collaboration.
Monitor customer environments using security technologies to triage alerts and identify potential threats.
Escalate confirmed threats with actionable reports to appropriate channels.
Document investigations thoroughly and communicate outstanding items to incoming shifts for continuity.
Nightwing provides full-spectrum cyber, data operations, systems integration, and intelligence mission support services to intelligence, defense, civil, and commercial markets. Previously part of a Fortune 100 company and headquartered in Dulles, VA, Nightwing became independent in 2024 and continues to support mission-impactful initiatives with a team of dedicated professionals.
Provide Tier III SOC support including advanced triage, forensic analysis, and escalation for complex incidents.
Lead shift handovers and maintain situational awareness of SOC tools and telemetry.
Support Red Team and Purple Team exercises to improve detection coverage.
Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the fastest growing privately held companies and Best Places to Work in DC for 12 consecutive years, they foster an employee-centric culture and commitment to excellence.
Contribute to thought leadership through research, whitepapers, and webinars, and mentor team members in operational excellence.
Dragos is a global leader in OT cybersecurity, protecting critical infrastructure with technology, threat intelligence, and expert services. It is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust.
Lead Affirm's global security investigations and incident response program across the full lifecycle.
Serve as incident commander for major events, coordinating technical and cross-functional response.
Drive improvements to response tooling, detection, and AI-enabled investigation workflows.
Affirm builds honest financial products that let people pay over time with clear, predictable terms. We are a remote-first fintech company with a team-first culture focused on security, innovation, and long-term success.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Lead Tier 3 investigations into complex cybersecurity incidents, including malware, phishing, and ransomware attacks.
Coordinate incident response efforts across technical teams and stakeholders to ensure effective containment and recovery.
Prepare incident notifications, executive briefings, and post-incident reports to support continuous security improvement.
Jobgether uses an AI-powered matching process to connect candidates with hiring companies. The company operates as a platform that evaluates applications and shares shortlists with employers, focusing on efficient and fair recruitment.