Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Lead advanced threat investigations and independent threat hunting across diverse customer environments.
Act as an escalation point for complex incident analysis and collaborate with SOC analysts on emerging threats.
Develop detection capabilities, refine hunting methods, and deliver clear incident reports to strengthen defenses.
They are a cybersecurity partner specializing in managed detection and response services. The organization fosters a high-performance, collaborative culture grounded in integrity, ownership, and customer focus.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Perform security monitoring, digital forensics, and incident response across corporate, product, and mission environments.
Conduct threat hunting and apply cyber threat intelligence to secure the enterprise and improve detection capabilities.
Support vulnerability management, compliance assessments, and documentation of security procedures.
BlackSky is a real-time intelligence company that owns and operates a space-based intelligence platform, providing satellite imagery, automated analytics, and high-frequency monitoring. Its global team works with cutting-edge technology and is people-first, customer-focused, and fun.
Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.
Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.
Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.
Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.
Manage a global 24/7 Security Operations Center, defining and streamlining processes, workflows, and playbooks.
Lead and mentor a team of security analysts through weekly 1:1s, feedback, and career growth initiatives.
Collaborate with product, support, and security teams to scale operations and operationalize new technologies.
Huntress is a remote-first cybersecurity company founded in 2015 by former NSA cyber operators, providing enterprise-grade security to businesses of all sizes. It secures over 5 million endpoints and 16 million identities worldwide with a 24/7 human-led Security Operations Center.
Lead product research initiatives to develop and evaluate macOS security product strategies and technologies.
Identify, prototype, and analyze new telemetry from Apple's Endpoint Security API to expand prevention, hardening, and detection capabilities.
Reverse engineer macOS malware and security frameworks to identify coverage gaps and coordinate with engineering teams to ship new capabilities.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team making enterprise-grade cybersecurity accessible to businesses of all sizes. They now secure over 5 million endpoints and 16 million identities worldwide, backed by a 24/7 human-led SOC and a culture of inclusivity and remote collaboration.
Investigate security incidents using digital forensics and data analysis.
Build automation and detection models to identify unusual activity at scale.
Lead complex investigations with Legal, Privacy, and Engineering partners.
This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.
Hunt for emerging exploitation activity and attacker infrastructure across VulnCheck's data.
Turn discoveries into durable detections including rules, queries, and tooling.
Investigate payloads and post-exploitation activity and produce threat intelligence.
VulnCheck provides structured exploit intelligence on actively weaponized vulnerabilities, built for automation and AI workflows. Founded in 2021, the company has a collaborative and supportive culture with a team of cybersecurity experts.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Monitor and analyze security events, advise on remediation, and investigate intrusion attempts by correlating multiple sources.
Follow standard operating procedures to detect, classify, document, and report security incidents and escalate as needed.
Use AI tools thoughtfully to reduce manual work and make faster, smarter decisions in a fast-paced environment.
Oportun is a mission-driven financial services company that empowers its members to build a better financial future through intelligent borrowing, savings, and budgeting. Since inception, it has provided over $22.7 billion in responsible credit and saved members more than $2.5 billion in interest and fees.
Lead high-profile incident response engagements as the primary handler and coordinator.
Perform triage, forensic artifact analysis, and large-scale investigations across endpoints and networks.
Mentor junior responders and communicate clearly with customers throughout the incident lifecycle.
Cyderes builds practical identity and access management, exposure management, and risk programs, helping organizations stop active threats fast with managed detection and response. A Great Place to Work-Certified global team, they are driven by experienced operators and augmented by AI to deliver trusted security solutions.
Act as the primary escalation point and technical lead for complex incidents.
Enhance monitoring by tuning alerts, refining detection logic, and automating workflows.
Mentor junior engineers and document incident response procedures.
DYOPATH is a managed security services provider that helps organizations defend against evolving cyber threats through security operations and monitoring. The company fosters an award-winning culture guided by its L.O.V.E. philosophy, emphasizing teamwork, respect, and professional growth.
Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.
Monitor, triage, and resolve security alerts in Microsoft Defender XDR and Sentinel.
Lead incident response end-to-end and maintain ISO 27001 documentation and audits.
Administer IAM, PAM, and patch management to enforce least privilege and compliance.
Appen is a leader in AI training data, specializing in human-generated data to train, fine-tune, and evaluate models across generative AI, LLMs, computer vision, and speech. With over 1 million contributors in more than 200 countries, the company fosters a culture of innovation, collaboration, and humility.
Lead shift operations and guide analysts in triaging detection alerts and network telemetry across customer OT environments.
Serve as a senior investigator to identify misconfigurations, anomalies, and potential malicious behavior in industrial networks.
Write incident summaries and support the full scope of OT Watch Complete, from asset classification to vulnerability management.
Dragos is a global leader in operational technology (OT) cybersecurity, combining technology, threat intelligence, and expert services to protect the critical infrastructure that powers daily life. It is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.
Analyze web traffic datasets to identify and block malicious bot activity.
Work with threat researchers and data scientists to challenge and improve the detection engine.
Participate in on-call rotation to respond quickly to customer attacks.
DataDome provides real-time bot and agent trust management, protecting businesses from automated attacks with AI-powered detection. The company is trusted by enterprises like Etsy, PayPal, and SoundCloud, and operates with a 24/7 SOC and threat research team.