Triage and escalate security alerts across SIEM, EDR/XDR, WAF, email, and cloud sources while coordinating with an MSSP.
Own incidents end-to-end, documenting playbooks and updating detection logic so risk is actually reduced.
Develop and validate SIEM detection rules (ES|QL/EQL/KQL) and support building an insider threat monitoring program.
BTSE Group is a global leader in fintech and blockchain technology, providing white-label exchange and payment solutions, custody, wallets, and blockchain integration. They serve over 100 corporate clients worldwide and foster a lean, high-ownership security culture.
Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
Serve as the primary escalation point for Tier I analysts and own critical incidents.
Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.
Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.
Monitor and maintain multiple SIEM environments, including Microsoft Sentinel and Splunk.
Configure data sources, log forwarders, and create custom dashboards, workbooks, and alerts.
Collaborate with clients to mature their SIEM security programs and provide technical guidance.
Critical Start delivers 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. They foster a collaborative, high-trust culture with casual dress, games, and a focus on innovation.
Operate and troubleshoot security solutions in data center and hybrid/cloud environments.
Deploy and maintain Microsoft Defender, Sophos, and related security tools.
Collaborate with internal teams, customers, and vendors on implementation projects.
Deutsche Telekom System Solutions Slovakia is an ICT services provider that has grown from scratch to become the second largest employer in eastern Slovakia with over 3,900 employees. The company focuses on continuously transforming to deliver innovative information and communication technology services.
Monitor and investigate security alerts, perform threat hunting, and report suspected incidents.
Analyze network traffic and log files to identify anomalous activity and potential threats.
Use SIEM and EDR tools, build Splunk queries, and mentor junior SOC team members.
Peraton is a global national security company providing mission capability integration and IT solutions to government agencies and the U.S. armed forces. Its employees tackle the most daunting challenges to keep people around the world safe and secure.
Serve as primary technical contact for escalated security events, leading incident response from triage through remediation.
Develop and maintain automation for security workflows using scripting and orchestration to reduce manual tasks.
Monitor, investigate, and triage security alerts using AI-assisted tools to accelerate analysis and prioritization.
PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, including online gaming and sports betting. With locations throughout North America, we offer a fun, relaxed work environment and are committed to your career growth.
Own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities.
Develop and tune detections, maintain operational dashboards, and automate response actions.
Support security incidents, gather evidence, and participate in the on-call rotation.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. We are a diverse team of 400+ globally distributed members who value curiosity, empathy, and accountability.
Investigate complex cyber abuse escalations across ransomware, malware, exploits, and data exfiltration threats.
Profile threat actors and campaigns using telemetry, external intel, and MITRE ATT&CK tradecraft.
Mentor junior investigators, review casework, and deliver high-fidelity labels for AI safety classifiers.
TaskUs is a provider of outsourced digital services and next-generation customer experience for fast-growing technology companies. With approximately 60,000 employees across 23 locations worldwide, the company maintains a People First culture focused on employee well-being and internal mobility.
Deliver end-to-end threat intelligence enablement and technical onboarding, optimizing customer digital footprints and alert rules for noise-free monitoring.
Develop custom automation scripts, AI agents, and SOAR playbooks to streamline security workflows and enhance platform adoption.
Drive customer retention through proactive engagement, churn risk analysis, and adaptive threat reporting.
SOCRadar provides Extended Threat Intelligence (XTI) solutions that help organizations proactively secure their attack surfaces and gain visibility into surface, deep, and dark web threats. The company is focused on innovation, global expansion, and delivering automation-enabled security to enterprises worldwide.
Design, implement, and maintain log collection pipelines across the organization.
Create, tune, and validate SIEM correlation rules and alerts for threat detection.
Support incident response through log analysis, documentation, and reporting.
We are a cutting-edge e-commerce company developing products for our own technological platform. Our teams are creative, smart, and dedicated, and we foster an open, collaborative, and respectful culture.
Monitor and analyze security events across network, endpoint, and cloud environments using Elastic SIEM to identify suspicious activity and threats.
Investigate and validate potential security incidents, including malware, phishing, and unauthorized access, with initial triage and prioritization.
Collaborate with Security Operations and cross-functional teams to support incident response, detection rule tuning, and continuous improvement.
Netrix Global provides the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. The company is consistently ranked in the CRN VAR500 as a top system integrator, serving clients across healthcare, manufacturing, government, education, financial services, and legal industries.
Act as the blue team voice, defining what "correct" means for firewall detection and remediation.
Partner with Product and Engineering to turn firewall tuning goals into buildable requirements.
Own deep knowledge of major firewall platforms and validate features against real SOC workflows.
Horizon3 is a fast-growing, remote cybersecurity company enabling organizations to find, fix, and verify exploitable attack vectors. We are a team of former U.S. Special Operations cyber operators and startup engineers, committed to respect, collaboration, ownership, and results.
Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, and data-protection technologies.
Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider threat, and third-party events.
Conduct threat intelligence, threat hunting, and vulnerability management to prioritize and remediate risks.
Trupanion is a leading provider of medical insurance for cats and dogs in North America. We offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.
Investigate and respond to security alerts and incidents.
Operate SIEM, endpoint protection, and threat detection tools.
Support vulnerability management and security assessments.
LEONI is a global leading provider of products, solutions and services for energy and data management in the automotive industry. With about 95,000 employees in 23 countries and part of Luxshare Group, we shape the future of mobility.
Provide tier 2 and 3 support to customers and collaborate with threat researchers to challenge detection engines.
Analyze huge web traffic data sets to identify and block malicious traffic, and create scripts to detect outliers.
Identify potential attacks and add new alerts to strengthen DataDome's real-time detection platform.
DataDome stops cyberfraud and bots in real time using a multi-layered AI engine built on intent analysis. The company is backed by a 24/7 SOC team and a multicultural R&D team, with a joyful workplace and many social events.
Conduct hypothesis-driven threat hunts across endpoints, networks, and cloud telemetry to identify threats evading detection.
Analyze logs and alerts for IOCs and adversary TTPs, then deliver findings and detection recommendations to stakeholders.
Partner with blue teams during purple team engagements to tune and validate detection controls against red team activity.
SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. We combine deep expertise with innovative technical capabilities, fostering a diverse and inclusive culture with flexible remote work.
Proactively hunt for cyber threats and malicious activity undetected within network environments.
Collaborate with incident response and detection teams to investigate anomalies and develop intelligence.
Build hunting tools and automation to improve detection of sophisticated adversaries.
A partner company is hiring a cybersecurity threat hunter to proactively identify and analyze advanced cyber threats. The role is fully remote, contingent upon contract award, and requires a DoD Top Secret Clearance.
Perform triage and advanced analysis across endpoint, server, and network infrastructure.
Conduct threat hunting and proactive investigations to detect malicious activities.
Document recommendations and maintain knowledge of the threat landscape.
Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.
Investigate security incidents using digital forensics and data analysis.
Build automation and detection models to identify unusual activity at scale.
Lead complex investigations with Legal, Privacy, and Engineering partners.
This company is building a security operations team focused on threat detection and incident response. The culture emphasizes collaboration, automation, and continuous improvement, with a team that values mentorship and cross-functional partnerships.
Lead enterprise-scale security deployments using Microsoft Sentinel and Defender XDR.
Design advanced detection, automation, and reporting to improve threat visibility.
Mentor engineers and deliver technical leadership across complex customer projects.
This cybersecurity engineering partner helps organizations strengthen defenses against sophisticated digital threats using Microsoft Sentinel, Defender XDR, and Azure. It is a mission-driven, collaborative environment focused on innovation, technical leadership, and professional growth.