Top Tech Jobs & Startup Jobs

Support customer security operations by advising on detection engineering, SIEM monitoring, log ingestion, alert quality, and threat detection. Manage relationships across multiple client environments, develop and tune detection rules, identify monitoring gaps, reduce false positives, support investigations and threat hunting, and provide technical recommendations. Collaborate with SOC and detection engineering teams to improve managed detection and response services.

Provides managed security operations and client-facing threat analysis. Performs endpoint, SIEM, server, and network triage; conducts proactive threat hunting and incident investigations; identifies attack and compromise indicators; maps use cases to MITRE ATT&CK; reviews logs, develops recommendations, and escalates threats. Requires at least three years of IT security experience, EDR and SIEM expertise, query-language proficiency, phishing investigation experience, security certification, and SOAR knowledge.

Serve as the technical owner for client detection outcomes: maintain and tune SIEM detections, identify and remediate coverage gaps, advise clients on detection strategy and prioritization, partner with SOC/DFIR during escalations, and drive measurable improvements in detection performance.

Implement, administer, and optimize Tanium across enterprise environments. Manage endpoint visibility, asset discovery, vulnerability remediation, patching, software deployment, dashboards, reporting, and security investigations. Integrate Tanium with SIEM, EDR, ITSM, and vulnerability management platforms. Develop PowerShell or Python automation, troubleshoot platform and agent issues, and support endpoint security operations for internal teams and enterprise clients.

Identify and qualify enterprise prospects through outbound calls, email, LinkedIn, and other sales channels. Research target accounts, engage cybersecurity decision-makers, communicate solution value, qualify opportunities, schedule discovery meetings, and build pipeline for Enterprise Account Executives. Maintain prospect and opportunity data in Salesforce or a comparable CRM while executing territory-specific campaigns.

Leads IAM/PAM managed service delivery, technical operations, client engagement, and team development. Designs and supports CyberArk PAM, EPM, and Conjur solutions across enterprise, cloud, DevOps, and Kubernetes environments. Manages SLAs, incidents, changes, upgrades, capacity, performance, governance, and continuous improvement. Serves as the primary client contact, presents service metrics, handles escalations, and participates in 24x7 on-call support.

Provides Level 2/3 production support for PingFederate and enterprise IAM environments. Administers SSO, federation connections, authentication policies, and integrations using SAML, OAuth, and OIDC. Troubleshoots authentication failures, tokens, certificates, and outages; performs upgrades, patches, monitoring, incident management, root cause analysis, and documentation. Collaborates with IAM, security, and infrastructure teams and participates in on-call support.

Perform advanced security monitoring, threat hunting, incident investigation, and triage across endpoint, server, and network environments. Analyze SIEM and endpoint data, identify indicators of attack and compromise, map customer use cases to MITRE ATT&CK, scope incidents, provide recommendations, maintain documentation, and participate in an after-hours incident-controller rotation.

Leads IAM managed services delivery, overseeing technical operations, client relationships, service-level agreements, team performance, incident response, root cause analysis, and continuous improvement. Manages IAM professionals, workloads, training, reporting, and operational policies. Supports pre-sales engagements, develops Statements of Work, leads client meetings, and ensures coverage for North American and European clients, including on-call incident support.

Provides advanced managed security services, including threat investigations, incident response, SIEM analysis, MITRE ATT&CK mapping, remediation, alert tuning, and security-content management. Mentors analysts, analyzes endpoint, server, network, and email threats, reviews logs, documents recommendations, maintains runbooks, and monitors the evolving threat landscape. Requires at least five years of IT security experience, senior-level experience, SIEM and EDR expertise, query-language proficiency, security certification, SOAR knowledge, and SOC or incident-response experience.