Top Tech Jobs & Startup Jobs

Lead investigation and triage of cyber incidents, characterize severity, develop mitigation and restoration plans, monitor threat sources, analyze alerts and logs, and document incidents from detection through resolution while providing shift coverage.

Provide cyber technology research and case management for government incident response: track/manage cases, research and evaluate commercial and open-source solutions, perform hands-on testing, document technical requirements, develop mitigation plans, coordinate capability implementation, maintain technology inventories, and engage requesters to align solutions with mission needs.

Support government incident response by researching, evaluating, and managing cybersecurity technologies. Track cases from submission to capability delivery, perform hands-on evaluations, coordinate pilots and integrations, document requirements, advise stakeholders, and assist restoration and mitigation for mission-critical systems.

Lead and coordinate on-site cyber incident investigations, triage and characterize breaches, recommend mitigations, analyze alerts and logs, document incidents from detection through resolution, and provide shift-based operational support to restore services.

Develop and implement automation for ML/LLM integrations and data pipelines to support incident response and automated malware analysis. Build ingestion, transformation, monitoring, API integrations, and scale automation from pilot to production while ensuring data quality and documenting solutions.

Perform advanced hardware and firmware reverse engineering on OT/ICS and network-edge devices, extract embedded malware, analyze proprietary hardware and protocols, develop forensic SOPs, train analysts, support live incident response, and collaborate on microelectronics exploitation and emulation research.

Perform frontline DFIR and proactive network hunting: collect and analyze network intrusion artifacts (PCAP, metadata), assess topologies and device configurations, coordinate incident response teams, produce CND guidance and reports, brief stakeholders, and advise on remediation during onsite engagements.

Perform network-focused DFIR and proactive hunting: collect and analyze network artifacts (PCAP, logs), assess topologies and device integrity, support onsite incident response, recommend mitigations, and coordinate with government leads during investigations.

Support government cyber incident response by investigating breaches, developing mitigations, restoring services, managing lab infrastructure, administering systems (Linux/Unix, MacOS/iOS), supporting VPN/VDI, troubleshooting storage and networking, creating SOPs, and providing user helpdesk and account management.

Provide frontline DFIR and proactive network hunting: analyze network traffic, validate and escalate alerts, perform packet-level and trend analysis, develop signatures, reconstruct attacks, and produce reports to support mission-critical cyber defense.