Lead the end-to-end incident response lifecycle as the primary internal escalation point from the SOC.
Drive strategic preparedness through tabletops, purple teaming, and telemetry optimization to reduce noise and increase detection efficacy.
Collaborate with engineering and offensive security teams, owning post-incident reviews to harden defenses and improve response capabilities.
Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.
Monitor and triage security alerts across identity, endpoint, email, network, cloud, and application technologies.
Investigate phishing, account compromise, malware, ransomware, and other security events while coordinating incident response.
Conduct threat intelligence, threat hunting, vulnerability management, and forensic evidence collection to protect company assets.
Trupanion is a leading provider of medical insurance for cats and dogs in North America. They offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.
Analyze, investigate, document, and report on security alerts and potential incidents in customer environments.
Serve as an incident coordinator for urgent security events requiring response, containment, and remediation.
Stay up-to-date on security training, certifications, and emerging threats to provide meaningful consultation.
CyberSheath provides cybersecurity services to the Defense Industrial Base, integrating compliance and threat mitigation to eliminate redundant security practices. It is a rapidly growing managed services provider focused on improving clients' security posture.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, and data-protection technologies.
Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider threat, and third-party events.
Conduct threat intelligence, threat hunting, and vulnerability management to prioritize and remediate risks.
Trupanion is a leading provider of medical insurance for cats and dogs in North America. We offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.
Utilize Sophos technologies to investigate, contain, and respond to cyber incidents for MDR customers and MSPs.
Mentor incident response analysts and provide technical guidance, review, and escalation support.
Perform advanced incident response analysis to identify initial access, persistence, and lateral movement to contain and remediate threats.
Sophos is a cybersecurity company providing advanced threat detection and response solutions. The company supports a diverse and inclusive workforce with flexible working arrangements, including remote roles.
Maintain oversight of threat analysts and manage daily Security Operations Center activities.
Lead incident response and investigation to determine root cause and resolution.
Apply expertise in network intrusion analysis, digital forensics, and malware handling to protect customers.
Sophos provides cybersecurity solutions including Managed Detection and Response (MDR) services. It is a global, remote-first company with thousands of employees, fostering a collaborative and inclusive culture.
Monitor, triage, and investigate security alerts across identity, endpoint, email, and cloud environments.
Own routine investigations through to documented outcomes: gather evidence, establish timelines, and explain conclusions.
Improve runbooks, tune detections, and contribute to automation and scripting to simplify workflows.
Samsara is the pioneer of the Connected Operations Cloud, helping organizations improve safety, efficiency, and sustainability of physical operations. As a recently public company, it fosters a culture of ownership, flexibility, and belonging, with a global team focused on long-term impact.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Monitor and triage alerts from security tools including SIEM, EDR/XDR, firewalls, and email security.
Assist with identity and access management, vulnerability scanning, and incident response activities.
Support security awareness initiatives and collaborate with IT teams and the MSSP to resolve security issues.
Make-A-Wish America is a nonprofit organization that grants life-changing wishes to children with critical illnesses. It is the world's largest wish-granting organization, fostering a community-focused and inclusive workplace.
Lead investigative execution of active cyber incidents for MDR customers and MSPs.
Work directly with customers to investigate, contain, and support remediation.
Mentor incident response analysts and provide technical guidance.
Sophos is a leading cybersecurity company focused on protecting organizations from cyber threats. As a remote-first company, they emphasize collaboration across global teams and are committed to diversity and inclusion.
Triage and escalate security alerts across SIEM, EDR/XDR, WAF, email, and cloud sources while coordinating with an MSSP.
Own incidents end-to-end, documenting playbooks and updating detection logic so risk is actually reduced.
Develop and validate SIEM detection rules (ES|QL/EQL/KQL) and support building an insider threat monitoring program.
BTSE Group is a global leader in fintech and blockchain technology, providing white-label exchange and payment solutions, custody, wallets, and blockchain integration. They serve over 100 corporate clients worldwide and foster a lean, high-ownership security culture.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Monitor and triage security alerts across SIEM, endpoint, email, identity, and access systems.
Investigate phishing, malware, suspicious logins, and security events, documenting findings.
Build automations and AI-assisted workflows to reduce manual work and improve operational efficiency.
Magnet Forensics is a global leader in digital investigative software that acquires, analyzes, and shares evidence from computers, smartphones, tablets, and IoT-related devices. With employees around the world, the company is expanding and fosters a culture of learning, innovation, and integrity.
Investigate and analyze logs and security-related events via Sophos tooling
Identify and respond to cyber threats occurring within customer environments
Communicate and document findings to various customer audiences including technical and executive teams
Sophos is a cybersecurity company that delivers best-in-class monitoring, detection, and response services. It is a remote-first company with a focus on teamwork and continuous improvement.
Lead investigative stream of active cyber incidents, performing advanced forensic analysis and containment tasks.
Utilize Sophos technologies to investigate, contain, and respond to cyber incidents across diverse customer environments.
Maintain detailed documentation and provide clear communication to MDR customers during incidents.
Sophos is a cybersecurity company that provides Managed Detection and Response (MDR) services. It is a remote-first company committed to fostering a diverse and inclusive workplace.
Monitor tools and systems that defend production environments and correlate seemingly unrelated events.
Lead response to incidents affecting customers and track incidents to closure across functional teams.
Build and maintain incident response playbooks, handbooks, and cybersecurity standards.
ServiceNow is the AI control tower for business reinvention, bringing together any AI, any data, and any workflow. It serves 85% of the Fortune 500, fostering an AI-native culture where technology and talent are unstoppable together.
Handle escalations from level I Threat Analysts and train new team members in a 24/7 SOC environment.
Conduct security log monitoring, event detection, and response using endpoint and network security tools.
Research threat intelligence, create MDR reports, and interact with clients to neutralize cyber threats.
Sophos is a global leader in cybersecurity, providing advanced threat detection and response solutions. The company is a remote-first organization with a diverse and collaborative culture, committed to innovation and employee growth.
Own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities.
Develop and tune detections, maintain operational dashboards, and automate response actions.
Support security incidents, gather evidence, and participate in the on-call rotation.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. We are a diverse team of 400+ globally distributed members who value curiosity, empathy, and accountability.