Investigate security incidents using digital forensics and data analysis.
Build automation and detection models to identify unusual activity at scale.
Lead complex investigations with Legal, Privacy, and Engineering partners.
This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.
Build, deploy, and continuously improve MITRE ATT&CK–aligned detections across cloud, endpoint, identity, email, and application telemetry with clear false-positive thresholds.
Own the full detection lifecycle from hypothesis and data validation through deployment, tuning, and retirement.
Advance the detection-as-code platform with version control, peer review, automated testing, CI/CD, and improved pipeline reliability and observability.
Samsara is the pioneer of the Connected Operations™ Cloud, helping organizations that depend on physical operations to harness IoT data for actionable insights. They are a recently public company with a high-caliber team, embracing a flexible working model that supports remote and hybrid work.
Act as the primary escalation point and technical lead for complex incidents.
Enhance monitoring by tuning alerts, refining detection logic, and automating workflows.
Mentor junior engineers and document incident response procedures.
DYOPATH is a managed security services provider that helps organizations defend against evolving cyber threats through security operations and monitoring. The company fosters an award-winning culture guided by its L.O.V.E. philosophy, emphasizing teamwork, respect, and professional growth.
Lead detection and response strategy for Apollo's Security team, building detection systems and response automations hands-on.
Own detection architecture, security observability, and incident response readiness across cloud and SaaS environments.
Drive AI-augmented detection and response, measuring gains in speed, coverage, and signal quality.
Apollo.io is a leading go-to-market platform for revenue teams, providing verified contact data and engagement tools for over 500,000 companies. Founded in 2015, it has raised ~$250M, is valued at $1.6B, and fosters an AI-native culture of continuous improvement.
Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.
Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.
Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.
Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.
Lead enterprise-scale security deployments using Microsoft Sentinel and Defender XDR.
Design advanced detection, automation, and reporting to improve threat visibility.
Mentor engineers and deliver technical leadership across complex customer projects.
This cybersecurity engineering partner helps organizations strengthen defenses against sophisticated digital threats using Microsoft Sentinel, Defender XDR, and Azure. It is a mission-driven, collaborative environment focused on innovation, technical leadership, and professional growth.
Monitor, triage, and respond to security alerts and incidents across the security stack.
Engineer, implement, and maintain information security technologies such as SIEM, detection rules, and automation.
Collaborate with teams to promote information security culture and advise on cyber risk across the organization.
VEIC is a sustainable energy organization working toward a healthy planet, thriving people, and energy justice. The company values an inclusive culture and supports flexible work arrangements, welcoming candidates of all backgrounds.
Protect cloud infrastructure, applications, and customer data across a modern technology environment.
Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.
Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.
Provide technical and operational leadership for a Security Operations Center, monitoring threats and driving incident response.
Design and develop security tools and platforms to improve detection, response, and operational efficiency.
Mentor early-career engineers and contribute to open source security projects and industry conferences.
Jobgether uses AI-powered matching to help candidates find jobs. The company operates a fully distributed, remote-first environment with in-person team events.
Review defensive-security and infrastructure-security RL environments for realism, solvability, and correct grading.
Flag missing context, inconsistent files, unclear requirements, or anything that makes tasks ambiguous.
Write concise justifications for each decision and work async on a flexible part-time schedule.
IdleXperts is idler's quality assurance network, made up of part-time remote experts who review reinforcement-learning environments before customer delivery. The company relies on independent, self-directed contributors with deep security expertise to ensure tasks are fair and correctly graded.
Perform security monitoring, digital forensics, and incident response across corporate, product, and mission environments.
Conduct threat hunting and apply cyber threat intelligence to secure the enterprise and improve detection capabilities.
Support vulnerability management, compliance assessments, and documentation of security procedures.
BlackSky is a real-time intelligence company that owns and operates a space-based intelligence platform, providing satellite imagery, automated analytics, and high-frequency monitoring. Its global team works with cutting-edge technology and is people-first, customer-focused, and fun.
Run and tune the client's Microsoft Purview setup including labels, DLP, retention, insider risk, and eDiscovery from day one.
Partner with Security, Legal, Compliance, Privacy, IT, and Data Governance teams to mature and scale enterprise data protection.
Operate at both technical and strategic levels to drive data security posture and reporting to leadership.
New Era Technology securely connects people, places, and information with end-to-end technology solutions at scale. With a global team of over 3,000 professionals, they foster a People First culture focused on collaboration, inclusion, and continuous development.
Lead security incident response end-to-end across cloud, identity, and workload logs.
Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
Automate detection and response tasks using Python and Terraform, and mentor engineers.
Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.
Design, deploy, and maintain Microsoft cloud security technologies including Purview, Defender for Cloud, and Entra ID.
Apply a red-team mindset to identify weaknesses and improve security posture.
Act as a trusted security advisor to internal teams and customers on governance and data protection.
Patch My PC provides an enterprise solution for automating and managing third-party updates in Microsoft ConfigMgr, Intune, and WSUS. The fully remote crew of 150 GIF-loving humans supports over 10,000 customers and more than 32 million devices.
Lead and grow the SOC, owning detection strategy and incident response across both production and corporate estates.
Architect an AI-first operating model for the SOC, building automation for triage, enrichment, and investigation.
Partner with Platform Engineering to extend detection into production and cloud workloads, treating detection content as code.
Motive empowers the people who run physical operations with tools to make their work safer, more productive, and more profitable. The company serves nearly 100,000 customers across a wide range of industries, including transportation, logistics, construction, energy, and more.