Top Tech Jobs & Startup Jobs

Perform frontline DFIR and proactive network hunting: collect and analyze network intrusion artifacts (PCAP, metadata), assess topologies and device configurations, coordinate incident response teams, produce CND guidance and reports, brief stakeholders, and advise on remediation during onsite engagements.

Perform network-focused DFIR and proactive hunting: collect and analyze network artifacts (PCAP, logs), assess topologies and device integrity, support onsite incident response, recommend mitigations, and coordinate with government leads during investigations.

Support government cyber incident response by investigating breaches, developing mitigations, restoring services, managing lab infrastructure, administering systems (Linux/Unix, MacOS/iOS), supporting VPN/VDI, troubleshooting storage and networking, creating SOPs, and providing user helpdesk and account management.

Provide frontline DFIR and proactive network hunting: analyze network traffic, validate and escalate alerts, perform packet-level and trend analysis, develop signatures, reconstruct attacks, and produce reports to support mission-critical cyber defense.

Analyze network traffic to detect and characterize intrusions, validate alerts, perform packet- and signature-level analysis, reconstruct attacks, develop/deploy signatures, produce trend and incident reports, and coordinate remediation with enterprise cyber defense teams.

Support onsite incident response by investigating breaches, developing mitigations, restoring services, managing lab infrastructure, administering networks, VPN/VDI support, troubleshooting user issues, and maintaining storage and access controls.

Lead and document cyber incident investigations, characterize breach severity, develop mitigation plans, analyze log/alert data, monitor threat intelligence sources, coordinate remediation across teams, and provide shift-based incident response support.

Lead and coordinate cyber incident investigations, triage and prioritize alerts, determine scope and impact, develop mitigation plans, and support restoration. Monitor threat intelligence sources, document incidents from detection through resolution, and collaborate with stakeholders during assigned shifts to defend enterprise networks.

Develop and implement automation for ML/LLM integrations and data pipelines to support incident response and automated malware analysis. Build ingestion, transformation, monitoring, API integrations, and scale automation from pilot to production while ensuring data quality and documenting solutions.

Design and implement automation for ML integration and cyber incident response: data ingestion pipelines, malware analysis automation, LLM/Databricks/Bedrock integrations, API and data integration automation, feature engineering, monitoring, scaling to production, and documentation.