Live Job Feed

Find Your Dream Career

Thousands of curated opportunities from top companies — filter by role, salary, and remote preference to find your perfect fit.

Free foreverNo credit card requiredVerified listings
73,156+Live Positions
—Companies
100%Free to Apply
Updated HourlyFresh Listings
Quick:
Browse:

73,156 jobs

Junior SOC Analyst (Q Clearance)
ShorePoint, LLCLas Vegas, United States21 days ago
InternshipOn-siteJunior
triageremediationinsurance

Who We Are ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a "work hard, play hard" mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community. The Perks As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual's technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more. Who We're Looking For We are seeking a Junior Security Operations Center (SOC) Analyst (Q clearance) to monitor security events, investigate incidents, and support containment and remediation activities. The ideal candidate will combine foundational cybersecurity knowledge with strong analytical skills to support real-time security operations. The Junior SOC Analyst role contributes directly to threat detection, incident response, and security monitoring efforts across the enterprise. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. What You'll Be Doing Monitor security systems and triage alerts. Investigate security incidents and document findings. Coordinate with other teams to contain and eradicate threats. Conduct post-incident analysis and assist in reporting. Support continuous improvement of monitoring and detection processes. What You Need To Know Strong understanding of foundational network and system security concepts. Proficiency using cybersecurity tools and platforms. Ability to analyze alerts, logs, and system behavior to identify suspicious activity. Strong analytical and problem-solving skills. High attention to detail. Must Have's Bachelor's degree. 1+ years of relevant experience. Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking. Must have the ability to work shifts on a rotating basis for 24/7 support of clients. Travel up to 15%, on average, based on the work you do and the clients and industries/sectors you serve. Applicants must hold and maintain an active DOE Q clearance or equivalent DoD Top Secret clearance.. Beneficial To Have The Following Industry-recognized cybersecurity certifications. Where It's Done Onsite (Las Vegas, NV).

View Job
Cyber Monitoring and Incident Response Associate (SOC Analyst)
Full-timeOn-siteMid
insuranceprocess improvement

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve. The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance. Pay And Benefits Competitive compensation, including base pay and annual incentive Comprehensive health and life insurance and well-being benefits, based on location Pension / Retirement benefits Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being. DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee). The Impact You Will Have In This Role Being a member of CISO team, this role reports to the Cyber Monitoring and Incident Response Team Regional Manager and working with technical leads and other associates, you are responsible for detecting, investigating, and responding to cyber security events in the organization as well as handling technical projects. You are a member of the Cyber Monitoring & Incident Response Team (CMIR) and as a result may be tasked with responding to cyber incidents outside of normal work hours. Your Primary Responsibilities Monitor, Detect, Analyze, and respond to cyber security events. Perform eDiscovery and other technical tasks. Independently lead investigations and technical tasks. Train and mentor junior staff members. Participate in training, exercises, and process improvement program. Occasionally travel to conferences, training, and other DTCC offices (up to 10%). Participate in on-call rotation and occasional after-hours work. NOTE: The Primary Responsibilities of this role are not limited to the details above.* Qualifications Bachelor's degree and/or equivalent in Cyber Security or related field Min 3 years of relevant experience Talents Needed For Success Have at least two (2) years previous experience as a SOC analyst or similar role. Demonstrate the ability to produce written reports including detailed analysis and recommendations. Demonstrate the ability to convey complex technical concepts to both technical and non-technical audiences. Have hands-on experience with modern security tools and DFIR best practices. Demonstrate the ability to take high-level requirements and with some guidance produce and execute an action plan to accomplish tasks. Demonstrate the ability to prioritize and manage multiple tasks with some guidance. Demonstrate a strong desire to achieve and contribute to a high-performing team. The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

View Job
SOC Analyst
ArctiqNashville, United States17 days ago
Full-timeOn-siteJunior
awsazuregcplinuxtriagegcp+1

Company Overview Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries. Position Overview We are hiring multiple SOC Analysts at the Tier 1 and Tier 2 levels to staff our Day, Swing, and Night shifts. You will be a frontline defender for a diverse portfolio of clients — monitoring detections, triaging alerts, leading investigations, executing response playbooks, and continuously improving the way we detect and respond to threats. This role is ideal for analytical, curious, and resilient practitioners who enjoy fast-paced work, want exposure to a broad range of environments and technologies, and care deeply about protecting customers. Responsibilities Continuously monitor and triage alerts and detections across SIEM, EDR/XDR, identity, email, network, and cloud telemetry for our managed client base, applying severity classification and initial enrichment on every event you touch. Investigate suspicious activity end-to-end — from validation and pivoting through to root-cause analysis — using knowledge of attacker tradecraft, the MITRE ATT&CK framework, and the cyber kill chain to reach confident, well-supported conclusions. Execute documented response playbooks to contain threats, including isolating hosts, disabling compromised accounts, blocking indicators, resetting credentials, and coordinating handoffs with client and engineering teams. Partner with Detection Engineering to reduce noise and false positives, and to propose, test, and deploy new analytics, automations, and SOAR playbooks that make the SOC faster and more accurate. Maintain audit-grade documentation throughout every case, capturing notes, timelines, and customer-facing communications cleanly in the ticketing and case-management system. Consistently meet triage, investigation, and notification SLAs while sustaining high accuracy, low false-positive rates, and strong client satisfaction across the portfolio. Drive continuous improvement of the SOC by feeding lessons learned back into detections, playbooks, runbooks, and knowledge-base articles in partnership with SOC Leadership and Detection Engineering. Operate on an assigned shift (Day, Swing, or Night) within a 24x7 rotation — including weekends and holidays as scheduled — and respond to on-call escalations when required. Qualifications One or more years in an IT security role or IT support role with significant security responsibilities. Working knowledge of core security concepts: TCP/IP, common protocols, Windows and Linux fundamentals, Active Directory / Entra ID, cloud (Azure / AWS / GCP) basics, and common attacker techniques. Familiarity with at least one SIEM and one EDR/XDR platform; comfortable writing or modifying basic queries (KQL, SPL, or similar). Demonstrated ability in effective communication and collaborating in a diverse high-performance team environment a strong commitment to customer service. Individuals will be required to submit to a background examination. Location: Remote candidates across North America will be considered, with preference given to candidates in or near one of our hub locations: Nashville, Tennessee, USA Duluth, Georgia, USA Candidates must be legally authorized to work in the country where they reside. Arctiq does not sponsor work Visas at this time. Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply. We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.

View Job
Senior Security Operations Analyst - Night Shift
Full-timeOn-siteMid$82,200 - $187,000 / Year
pythonrubybashterraformoraclejira+10

Job Description Develops and executes programs and processes to reduce information security risk and strengthen Oracle's security posture. Supports the strengthening of Oracle's security posture, focusing on the following: incident response; threat and vulnerability management; risk management; security policy development and enforcement; digital forensics Incident Management and response: Responds to security events, identifying possible intrusions and responding in line with Oracle incident response playbooks. Threat and Vulnerability Management: May research, evaluate, track, and manage information security threats and vulnerabilities that require analysis of well-understood information. Risk Management: Assesses information security risks associated with existing and proposed business operations, systems, applications, practices, and procedures in complex, business-critical environments. May conduct and document complex information security risk assessments and assist in developing and implementing security solutions and programs. Digital Forensics: May collect, preserve, and analyze digital media under supervision, applying a basic understanding of digital forensic techniques. Other areas of focus may include duties managing Information Security Education, Training and Awareness programs. In a Corporate Security role, may manage the creation, review and approval of corporate information security policies. This full-time role supports Oracle's government customer and requires 100% on-site work in Reston, VA. Responsibilities RESPONSIBILITIES SOC Analyst -This role will live in ONSR Operations and Support and perform as a SOC analyst, providing "eyes on glass" for incoming security alerts. Responsibilities include alert triage, automated response, analysis, closure, and escalation when necessary. Oracle Cloud Infrastructure (OCI) is building the next generation IaaS cloud service, and part of that is providing a world class cloud support experience, which includes Security Monitoring and Response. We are building a team of Security Analyst blending system admin, incident response, and cyber engineering disciplines. You'll be part of a team that shapes how our cloud platform works, how we respond to incidents, how we put out fires, and how we protect against futures incidents. You'll often be the bridge between core services & security operating best practices. Minimum required qualifications: At least 3 years of experience in information systems, including at least 2 years in one or more of the following areas: information security risk or program management; industry or government security compliance; threat and vulnerability management; incident management and response; security policy development and enforcement; privacy; information security education, training, and awareness (ISETA); or information security solutions development. Demonstrated proficiency in using query languages to search and analyze semi-structured data, along with practical experience developing and interpreting regular expressions for pattern matching and data filtering. Working knowledge of common Linux commands and command-line syntax, including the ability to interpret their purpose and function. Working knowledge of networking fundamentals and common protocols, including TCP/IP, DNS, SSH, HTTP/HTTPS, and TLS, and their roles in network communication and security. Candidates must possess and maintain an active TS/SCI Security Clearance with Polygraph and obtain any additional customer-specific access required to support business needs. Candidates must possess or be willing to obtain (within six months of hire date), at least one DoD 8140-approved baseline certification (e.g., CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, or PenTest+). Preferred qualifications: Experience as a SOC analyst using SIEM platforms to investigate alerts and correlate events across multiple log sources; using platforms such as ServiceNow, Jira, or XSOAR; and managing security incidents and vulnerabilities throughout their lifecycle. Experience conducting digital forensic analysis and threat hunting, applying the MITRE ATT&CK framework, and documenting findings in clear technical reports. Experience developing automated processes to respond to potential network intrusions using languages or tools such as Python, Bash, Ruby, Salt, or Terraform; familiarity with AI-assisted tools such as Codex, including the ability to review and validate generated outputs. Experience administering Linux systems, implementing security controls, and working with cloud computing and cloud security concepts, particularly Oracle Cloud Infrastructure (OCI). Qualifications Disclaimer: Certain U.S. based or U.S. customer or client-facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements. Range and benefit information provided in this posting are specific to the stated locations only US: Hiring Range in USD from: $82,200 - $187,000 per year. May be eligible for bonus and equity. Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. Oracle US offers a comprehensive benefits package which includes the following: Medical, dental, and vision insurance, including expert medical opinion Short term disability and long term disability Life insurance and AD&D Supplemental life insurance (Employee/Spouse/Child) Health care and dependent care Flexible Spending Accounts Pre-tax commuter and parking benefits 401(k) Savings and Investment Plan with company match Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation. 11 paid holidays Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours. Paid parental leave Adoption assistance Employee Stock Purchase Plan Financial planning and group legal Voluntary benefits including auto, homeowner and pet insurance The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted. As part of Oracle's onboarding process and consistent with applicable law, US-based employees are required to complete identity verification, which involves the collection and processing of their biometric information. Accommodations to this requirement may be granted following an individualized assessment. About Us Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives. True innovation starts when everyone is empowered to contribute. That's why we're committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States. Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

View Job
Security Operations Analyst
Thomson ReutersEagan, United States30 days ago
Full-timeOn-siteJunior$70,800 - $70,800 / Year
triagedentalmental healthcase managementaccountingtax+6

Job Description The Thomson Reuters Information Security and Risk Management (ISRM) organization is seeking a Security Operations Analyst to join our growing global Security Operations Center (SOC). The candidate will join a team responsible for managing cybersecurity alerts, events, and incidents as well as partnering with the other ISRM capabilities to improve the Thomson Reuters security posture. Key Responsibilities In this opportunity as a Security Operations Analyst, you will: Perform continuous security monitoring and incident response for a global enterprise environment Respond to, analyze, and triage alerts from multiple security technologies, including IDS and SIEM platforms Communicate security alerts and investigation findings to internal teams regarding potential intrusions or compromises Collaborate with other ISRM teams to provide feedback that improves detection coverage and alert quality Prepare clear briefings and written reports documenting analysis methodology and results Create and maintain standard operating procedures and other SOC documentation Produce end‑of‑shift reports to ensure effective handoff and continuity between analysts Maintain accurate records of monitoring and response activities using case management and ticketing systems Required Qualifications Minimum 2+ years experience in a SOC or incident response environment A background or degree in cybersecurity, computer science, or a related field; Hands‑on experience investigating security events across operating systems, networks, cloud environments, and messaging platforms Familiarity with security tooling such as SIEM, EDR, antivirus, firewalls, forensics, and cloud security solutions Familiarity with security automation and orchestration tools, such as SOAR. A solid understanding of common attack techniques and defensive response strategies Working knowledge of networking, operating systems, servers, and endpoints, with the ability to analyze security events Preferred Qualifications A strong interest in continuous learning and developing technical security skills Experience with cloud security tools, DLP operations, or automation is considered an advantage What's in it For You? Hybrid Work Model: We've adopted a flexible hybrid working environment for our office-based roles while delivering a seamless experience that is digitally and physically connected. Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance. Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow's challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future. Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing. Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together. Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives. Making a Real-World Impact: We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world. In the United States, Thomson Reuters offers a comprehensive benefits package to our employees. Our benefit package includes market competitive health, dental, vision, disability, and life insurance programs, as well as a competitive 401k plan with company match. In addition, Thomson Reuters offers market leading work life benefits with competitive vacation, sick and safe paid time off, paid holidays (including two company mental health days off), parental leave, sabbatical leave. These benefits meet or exceeds the requirements of paid time off in accordance with any applicable state or municipal laws. Finally, Thomson Reuters offers the following additional benefits: optional hospital, accident and sickness insurance paid 100% by the employee; optional life and AD&D insurance paid 100% by the employee; Flexible Spending and Health Savings Accounts; fitness reimbursement; access to Employee Assistance Program; Group Legal Identity Theft Protection benefit paid 100% by employee; access to 529 Plan; commuter benefits; Adoption & Surrogacy Assistance; Tuition Reimbursement; and access to Employee Stock Purchase Plan. Thomson Reuters complies with local laws that require upfront disclosure of the expected pay range for a position. The base compensation range varies across locations. For any eligible US locations, unless otherwise noted, the base compensation range for this role is $70,800 USD - $131,400 USD. Base pay is positioned within the range based on several factors including an individual's knowledge, skills and experience with consideration given to internal equity. Base pay is one part of a comprehensive Total Reward program which also includes flexible and supportive benefits and other wellbeing programs. This role may also be eligible for an Annual Bonus based on a combination of enterprise and individual performance. About Us Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news. We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward. As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace. Thomson Reuters makes reasonable accommodations for applicants with disabilities, including veterans with disabilities, and for sincerely held religious beliefs in accordance with applicable law. If you reside in the United States and require an accommodation in the recruiting process, you may contact our Human Resources Department at HR.Leave-Expert@thomsonreuters.com. Disability accommodations in the recruiting process may include things like a sign language interpreter, making interview rooms accessible, providing assistive technology, or other relevant accommodations. Please note this email is not intended for general recruitment questions and we will promptly respond to inquiries regarding accommodations. More information on requesting an accommodation here. Learn more on how to protect yourself from fraudulent job postings here. More information about Thomson Reuters can be found on thomsonreuters.com

View Job
For Employers

Reach — qualified candidates

Post your job today and get applications within 24 hours.

Post a JobFree posting available
Cybersecurity Analyst Tier 1
University of UtahSalt Lake City, United States17 days ago
Full-timeOn-siteJunior
linuxtriagecase managementremediationcompliancecopyright+2

Job Summary The University of Utah has an opportunity for a Cybersecurity Analyst Tier 1 (Security Operations Center) to help support our Information Security and Compliance goals. The Tier 1 SOC analyst will serve as the first line of defense against cyber threats, responsible for real-time security monitoring, initial alert triage, and rapid containment using established playbooks. This role offers a structured career growth path with dedicated mentorship from Tier-2 and Tier-3 analysts to help you advance your technical skills in incident response, detection logic, and threat analysis. About UIT : University Information Technology (UIT) , the central IT service provider for the University of Utah, reports to the U's Chief Information Officer and is responsible for many of the U's shared IT services including the wired and wireless network; Campus Information Services (CIS) portal; UMail, telephone, and online collaboration; digital learning technologies; information security; software licensing; and a host of other IT systems and services. About the University of Utah : Located in Salt Lake City, the U is the flagship institution of the State of Utah's system of higher education, home to arts and museum venues and a member of the BIG-12 Conference . Skiing and snowboarding opportunities are a short distance from campus, and opportunities to pursue activities from biking to hiking to fishing abound . Salt Lake City is home to the Utah Symphony and Opera , Ballet West , professional sports teams , and a wide range of other cultural and recreational activities. Responsibilities Incident Response: Perform initial triage, scoping, and evaluation of security alerts across endpoint, network, cloud, and identity domains. Execute established incident response playbooks for containment and remediation of low-to-medium complexity security alerts. Escalate complex, ambiguous, or high-severity security incidents to Tier-2 analysts with clear, detailed initial investigation notes. Accurately document incident details, triage steps, and remediation actions within the ticketing and case management systems. Detection Operations & Feedback Monitor SIEM, EDR, and cloud security platforms to ensure continuous operational visibility and alert hygiene. Identify recurring false positives or noisy alerts and flag them to Tier-2/3 analysts with contextual data for rule tuning. Utilize automated SOAR playbooks to perform basic enrichment and data collection during initial alert processing. Threat Analysis Review security alerts and threat feeds to recognize common adversary tactics, techniques, and procedures (TTPs). Map basic alert artifacts and findings to the MITRE ATT&CK framework during initial triage. Assist Tier-2 and Tier-3 analysts during major incidents by gathering supplemental logs, contextual artifacts, and host details. Professional Development & Growth Participate in regular investigation reviews to receive feedback, improve analytical rigor, and accelerate technical growth. Provide feedback on existing SOC playbooks and documentation to highlight operational gaps or outdated steps. Partner with Tier-2 analysts on escalated tickets to learn advanced investigation and response techniques. Minimum Qualifications EQUIVALENCY STATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years of directly related work experience). Department may hire employee at one of the following job levels: Information Security Analyst, I: Requires a bachelor's (or equivalency) + 2 years of directly related work experience or a master's (or equivalency) degree. Information Security Analyst, II: Requires a bachelor's (or equivalency) + 4 years or a master's (or equivalency) + 2 years of directly related work experience. Preferences Experience: 1-2 years of experience in an IT, system administration, or junior cybersecurity role (or equivalent hands-on lab experience / degree). Technical Knowledge: Basic understanding of networking fundamentals (TCP/IP, DNS, OSI model), operating system internals (Windows, Linux), and standard attack vectors (phishing, malware, web attacks). Tooling Familiarity: Exposure to enterprise SIEM platforms, EDR solutions, or log management tools.Certifications (Preferred): CompTIA Security+, CySA+, Cisco CyberOps Associate, or Blue Team Level 1 (BTL1). Soft Skills: Strong written communication skills for ticket documentation and a proactive desire to learn and grow within security operations. Special Instructions Requisition Number: PRN46592B Full Time or Part Time? Full Time Work Schedule Summary: Four ten hour shifts a week. Position will rotate between day, evening, and overnight shifts to include holidays and weekends. Department: 00954 - UIT Systems & Security Location: Campus Pay Rate Range: $28.00-32.00 Close Date: 11/16/2026 Open Until Filled To apply, visit https://utah.peopleadmin.com/postings/211428 Copyright ©2025 Jobelephant.com Inc. All rights reserved. Posted by the FREE value-added recruitment advertising agency je-d0ecb57c1895492884c83ae5354c6399

View Job
Cybersecurity Incident Response Team Security Analyst II
Full-timeOn-siteMid
pythonperlpowershellsplunkremediationarchitecture

THIS ROLE IS LOCATED ON-SITE IN ST. PETERSBURG, FL, AND CANDIDATE MUST BE A U.S. CITIZEN*** Job Summary Performs advanced monitoring and reporting of security events. Administrates security tools and devices ensuring proper functionality. Conducts investigations providing all required data for incident response. Essential Duties And Responsibilities Supports 24/7 global operations responding to security events in the environment; on-call as required. Performs advanced monitoring of security events; studies and reviews device security logs. Investigates a variety of events by correlating data from various sources to determine the risk to Jabil. Performs advanced incident analysis from logs and monitoring activities. Assists in large-scale security incidents, investigation, and response activities; advises on remediation. Creates/refines log monitoring reports, searches, or basic investigative tools to enhance monitoring. Handles escalations from SOC Security Analysts I. Performs analysis of the environment (e.g. port scans, activity monitoring, intrusion detection). Performs intermediate-level Health Checks and routine administration for security tools. Differentiates between security events or incidents to initiate incident response actions appropriately. Participates in IT security or customer audit activities. Performs mentoring and education for security staff members. Drives continuous improvement through trend reporting analysis and metrics management. Assures procedures and work instructions are efficient and not redundant. Identifies and implements new analytic methods for detecting threats. Anticipates and meets customer expectations by solving problems quickly and effectively. Maintains confidentiality in all security activities whether internal to Jabil or customer specific. Interprets a variety of instructions furnished in written, oral, diagram or schedule form. Lead small projects/initiatives as assigned. May perform other duties and responsibilities as assigned. Job Qualifications / Knowledge Requirements Ability to define problems, collect data, establish facts, and draw valid conclusions. Ability to effectively communicate analytical data to varied audiences, including executives. Ability to influence and build credibility as a peer through strong interpersonal and leadership skills. Ability to perform well under significant enterprise-wide pressure with a sense of urgency. Minimum Qualifications: Bachelor's degree in Computer Science, Information Systems, or related field or 3-5 years Security Operations, Network Administration or equivalent knowledge. Security related certifications: Security +, GSEC, or GCIH Strong working knowledge of perimeter technologies (e.g. firewalls, proxies). Strong working knowledge of security tools (e.g. SIEM, NetFlow, IDS/IPS, endpoint solutions, DLP). Strong working knowledge of networking (TCP/IP, network architecture) and packet capture and analysis. Advanced technical knowledge of operating systems, network services, applications, and security logging. Preferred Qualifications: Master's degree in Information Security, Cybersecurity, or Computer Network Defense. Relevant security related certifications a plus: GCIA, GCED, GMON, CEH, CCNA, CySA + Previous experience in scripting or programming (e.g. Python, PowerShell, PERL, Splunk SPL). Direct experience in an enterprise-level Cyber Incident Response Team or Security Operations Center. , BE AWARE OF FRAUD: When applying for a job at Jabil you will be contacted via correspondence through our official job portal with a jabil.com e-mail address; direct phone call from a member of the Jabil team; or direct e-mail with a jabil.com e-mail address. Jabil does not request payments for interviews or at any other point during the hiring process. Jabil will not ask for your personal identifying information such as a social security number, birth certificate, financial institution, driver's license number or passport information over the phone or via e-mail. If you believe you are a victim of identity theft, contact the Federal Bureau of Investigations internet crime hotline (www.ic3.gov), the Federal Trade Commission identity theft hotline (www.identitytheft.gov) and/or your local police department. Any scam job listings should be reported to whatever website it was posted in.

View Job
Cyber Security Event Monitoring Analyst
Full-timeOn-siteMid
linuxremediationcompliancecompliance

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do The Deloitte Security Operations team is responsible for detecting and remediating cyber threats across the internal global Deloitte network. We are seeking a Security Analyst who is passionate about Cyber Security and has a deep interest and curiosity to investigate a variety of different security alerts and hunt for evil. You will work in a world-class Global Security Operations Center, where the main responsibilities will be handling security incidents, performing malware/network analysis, investigating phishing campaigns, and more. In this role you will: Perform initial analysis and investigation into security alerts upon arrival in the global ticketing system Proactively monitor internal networks and remediate incidences for over 400,000 Deloitte employees and 49 subsidiaries across the globe Utilize enterprise Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) tools in accordance with in-house playbooks and standard operating procedures (SOPs) Identify and assist with the remediation of phishing campaigns as reported by Deloitte users Advance the Global Security Operations Center's internal processes and training operations Work alongside international teams in compliance with industry standards Be an active participant in 24x7 operations within a Follow-the-Sun model and 9-hour shifts The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived. Qualifications Exposure to any (EDR) tools, (SIEM) solutions, or log aggregation systems Fundamental understanding and/or working experience with different attack vectors such as malware, phishing, social engineering, or vulnerability exploitation Fundamental understanding and/or working experience with Active Directory, Windows, or Linux system administration Fundamental understanding and/or working experience with network services and devices, the OSI model, and TCP/IP protocols Excellent written, verbal, interpersonal, and collaborative skills Up-to-date knowledge on current cybersecurity news and trends Limited immigration sponsorship may be available.

View Job
Cyber Security Event Monitoring Analyst
DeloitteWashington, United States17 days ago
Full-timeOn-siteMid
linuxremediationcompliancecompliance

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do The Deloitte Security Operations team is responsible for detecting and remediating cyber threats across the internal global Deloitte network. We are seeking a Security Analyst who is passionate about Cyber Security and has a deep interest and curiosity to investigate a variety of different security alerts and hunt for evil. You will work in a world-class Global Security Operations Center, where the main responsibilities will be handling security incidents, performing malware/network analysis, investigating phishing campaigns, and more. In this role you will: Perform initial analysis and investigation into security alerts upon arrival in the global ticketing system Proactively monitor internal networks and remediate incidences for over 400,000 Deloitte employees and 49 subsidiaries across the globe Utilize enterprise Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) tools in accordance with in-house playbooks and standard operating procedures (SOPs) Identify and assist with the remediation of phishing campaigns as reported by Deloitte users Advance the Global Security Operations Center's internal processes and training operations Work alongside international teams in compliance with industry standards Be an active participant in 24x7 operations within a Follow-the-Sun model and 9-hour shifts The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived. Qualifications Exposure to any (EDR) tools, (SIEM) solutions, or log aggregation systems Fundamental understanding and/or working experience with different attack vectors such as malware, phishing, social engineering, or vulnerability exploitation Fundamental understanding and/or working experience with Active Directory, Windows, or Linux system administration Fundamental understanding and/or working experience with network services and devices, the OSI model, and TCP/IP protocols Excellent written, verbal, interpersonal, and collaborative skills Up-to-date knowledge on current cybersecurity news and trends Limited immigration sponsorship may be available.

View Job
Security Operations Analyst
Telos CorporationAshburn, United States17 days ago
Full-timeOn-siteJunior$65,000 - $85,000 / Year
linuxdentalprocess improvement

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security. Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. The salary range for these openings is $65K - $85K per year. Our employees enjoy more than just a great work environment! This position will be based at Ashburn, VA (HQ) - There are 2 openings one for each of the following shifts, Monday - Friday 12AM - 8AM and Saturday - Wednesday 8AM - 4PM and includes holidays. The Security Operations Center (SOC) Analyst is responsible for detecting, analyzing, investigating, and responding to cybersecurity incidents affecting Telos Corporation. The SOC Analyst continuously monitors enterprise security platforms, investigates security events, conducts proactive threat hunting, and works closely with Security Engineering, IT Operations, and other business stakeholders to improve the organization's security posture. Responsibilities Monitor enterprise security platforms, including SIEM, EDR, email security, network security, cloud security, and identity systems, for indicators of malicious or suspicious activity. Detect, analyze, investigate, document, and respond to cybersecurity incidents in accordance with established incident response procedures. Perform proactive threat hunting activities to identify malicious or suspicious activity not identified through automated detection. Collect, preserve, analyze, and document evidence during security investigations. Investigate security alerts, determine scope and impact, and coordinate response activities with Information Technology, Security Engineering, and business stakeholders. Assist with the administration, maintenance, and continuous improvement of enterprise security technologies. Validate the effectiveness of security controls and identify opportunities to improve detection, prevention, and response capabilities. Identify security risks, threats, and vulnerabilities affecting systems, applications, cloud services, and enterprise infrastructure. Maintain accurate case documentation and ensure timely completion of incident reports, shift turnover documentation, and assigned operational tasks. Produce clear technical documentation, investigation reports, metrics, and executive summaries for security incidents and operational activities. Develop and maintain SOC documentation, including playbooks, runbooks, and standard operating procedures. Participate in continuous improvement activities, including detection tuning, threat intelligence review, and process improvement initiatives. Support IT and security projects and perform other duties as assigned. Qualifications Bachelor's degree in a related field preferred, or the equivalent combination of education, professional training or work experience (6 years). Two (2) or more years of experience in information security, information technology, systems administration, network administration, or a related technical field. Must meet or be able to meet DoD 8140 Cyber Workforce qualification requirements for the Cyber Defense Incident Responder (531) work role. Industry certifications such as CompTIA CySA+, EC-Council Certified Incident Handler (ECIH), Certified Ethical Hacker (CEH), or equivalent cybersecurity operations and incident response certifications are highly desirable. Familiarity with Linux/Windows/Mac Operating Systems. Experience with enterprise security technologies such as SIEM, EDR, vulnerability management, firewalls, email security, or other network security tools. Understanding of common network protocols, operating system security, authentication, and system administration concepts. Knowledge of common cyber threats, vulnerabilities, malware, and attack techniques. Strong analytical, troubleshooting, and problem-solving skills. Effective written and verbal communication skills and the ability to interact professionally with technical and non-technical personnel. Demonstrated organizational skills and the ability to prioritize multiple tasks in a dynamic environment. Ability to work independently and collaboratively as part of a team. Demonstrated commitment to continuous learning and professional development. Demonstrated commitment to continuous improvement through documentation, process improvement, operational knowledge development, and professional growth. Ability to obtain a U.S. Government security clearance is preferred. The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship. Telos maintains a drug-free workplace and will conduct drug testing on all applicants who have accepted an offer of employment. Telos Corporation participates in the E-Verify program. Therefore, any employment with Telos will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security ("DHS") of your authorization to work in the United States. Telos offers excellent compensation packages including salary commensurate with experience and benefits to meet your needs for today and the future. Telos Corporation and its subsidiaries are committed to equal opportunity for all, without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic. Telos Corporation will make reasonable accommodations for known physical or mental limitations of otherwise qualified employees and applicants with disabilities unless the accommodation would impose an undue hardship on the operation of our business. If you are interested in applying for an employment opportunity and feel you need a reasonable accommodation pursuant to the ADA, please contact us at 1-800-283-1911. If you require relay service assistance, please click on the following link to review information on your state's relay service: https://www.fcc.gov/accessibility. Telos Corporation is an EEO/AA employer.

View Job
Senior Security Engineer
Sirona MedicalSan Francisco, United States18 days ago
Full-timeOn-siteMid$145,000 - $185,000 / Year
pythonbashawsazuregcpterraform+14

About Sirona Medical At Sirona Medical , we're building software that enables physicians to work as fast as they can think. Each year in the U.S., billions of patient images are captured—and nearly all of them are reviewed and diagnosed by radiologists. These specialists are the central hub of diagnostic medicine: over 80% of all healthcare data flows through radiology IT systems . Yet despite their pivotal role, radiologists are overburdened by outdated, fragmented software which limits their efficiency and ultimately the quality and efficiency of care that health systems can provide patients. That's where Sirona comes in. We're a San Francisco-based, cloud-native software company with employees around the world. Our deep understanding of both the practice and business of radiology has allowed us to build RadOS —a unified, AI-powered operating system powering the entire radiology workflows. How Sirona Solves the Problem Sirona Is Uniquely Positioned To Transform The Way Radiology Is Practiced. We're Delivering The Organizational Shift That Both Individual Radiologists And Entire Practices Urgently Need A unified, intuitive, and platform-agnostic solution A streamlined workspace that makes every part of the radiologist's workflow faster and easier The freedom to read from anywhere, for anyone By cutting clicks, optimizing diagnostic time, and unlocking efficiencies that extend far beyond the reading room into all care settings , Sirona empowers radiologists—and in doing so, we help the entire healthcare system move faster, smarter, and with greater impact on patient outcomes. For more information, please visit https://sironamedical.com/join/. About the Role We are seeking a Senior/Staff Security Engineer to help protect the infrastructure, applications, and patient data that power RadOS. You'll work closely with Engineering, IT, and Compliance to design and implement security controls across our cloud environment, support our HIPAA/SOC 2 compliance posture, and build the tooling and processes that let us move fast without compromising the trust our customers place in us. This role reports to the Vice President of Regulatory affairs and Quality Management. and will be a hands-on, individual-contributor role with significant autonomy. Key Responsibilities: Design, implement, and maintain security controls across our cloud infrastructure (AWS) supporting a HIPAA-regulated, SOC 2 audited environment Lead and/or support threat modeling, security design reviews, and secure code review for new features and architecture Own vulnerability management: identify, triage, and drive remediation of vulnerabilities across cloud and application layers Build and maintain logging, monitoring, and alerting (SIEM) to support detection and incident response Develop and maintain incident response playbooks; participate in and lead incident response when needed Partner with Engineering to embed security into CI/CD pipelines and infrastructure-as-code (Terraform or similar) Manage identity and access controls, including least-privilege IAM, SSO/MFA enforcement, and access reviews Support compliance initiatives and audits (SOC 2 Type II, HITRUST, HIPAA risk assessments) and own evidence collection and control documentation for your areas Evaluate and implement security tooling (CSPM, EDR/XDR, vulnerability scanning) as the environment scales Mentor engineers on secure development practices and act as a security point of contact for product and engineering teams Key Requirements 7+ years of experience in security engineering, infrastructure security, or a closely related role Hands-on experience securing cloud environments (AWS preferred; Azure/GCP a plus) Experience supporting compliance frameworks such as HIPAA, SOC 2, ISO 27000 series or similar in a regulated environment Proficiency with infrastructure-as-code (Terraform or similar) and scripting/automation (Python, Bash, or similar) Experience with vulnerability management, SIEM/logging platforms, and incident response Working knowledge of identity and access management, Zero Trust principles, and secure network architecture Strong communication skills — able to explain risk and trade-offs clearly to both engineers and non-technical stakeholders Prior experience in healthcare, health IT, or another highly regulated industry is a plus Computer Science or similar degree is a plus Relevant certifications (CISSP, CCSP, OSCP, or similar) are a plus but not required Benefits Stock Options Flexible PTO Medical, dental, vision insurance Life insurance Maternity and Paternity Leave 401K matching Apple equipment Sponsorship for conferences, continuing education, etc Dynamic engineering role–technological innovation is at the core of our business Growth and learning opportunities from a startup environment include working closely with an international team of scientists, engineers, platform architects, programmers and professionals Do something morally benevolent! The annual US base salary range for this full-time position is $145,000 - $185,000 + equity + benefits. Pay scale is flexible depending on experience. Within the range, individual pay is determined by work location and additional factors, including job-related skills, competencies, experience, relevant education and training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

View Job
Senior Cybersecurity Engineer
Ursa MajorBerthoud, United States18 days ago
Full-timeOn-siteMid$128,000 - $160,000 / Year
devopslinuxdentalcadremediationmanufacturing+8

The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. We are bringing a new model to space access: one in which every link in an enormous value chain isn't limited by those around it. We design rocket engines and propulsion solutions. Our products and technologies require an extraordinary team—one that will ensure the security of tomorrow's technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving problems and empowering each other every day. About The Role As a Senior Cybersecurity Engineer (Level 3 w/ Clearance) within our Digital Operations team, you won't just be monitoring alerts or checking compliance boxes. You will be a hands-on technical problem solver and trusted advisor who bridges the gap between commercial enterprise operations and cleared defense program execution—helping our hardware, software, and manufacturing engineers navigate complex security environments without slowing down the pace of innovation. Reporting up through Digital Operations, you will sit at the intersection of DevOps, Digital Manufacturing, Software Engineering, Zero-Trust Networking, and IT. As Ursa Major scales from 380 to 500+ employees and doubles our cleared cybersecurity bench, you will play a central role in both evolving our CMMC Level 2 posture and maintaining hands-on security engineering across classified spaces, secure labs, and air-gapped networks Responsibilities Stakeholder Enablement & Creative Risk Mitigation Partner directly with non-cyber employees (program managers, propulsion engineers, test stand operators, cleared defense leads) to understand their workflows and help them safely manage CUI and classified data flows without unnecessary friction. Approach security challenges with nuance rather than black-and-white rules. Find pragmatically secure pathways that satisfy federal requirements (RMF, NIST SP 800-53, NIST SP 800-171) while keeping physical hardware engineering, CAD/CAM development, and classified testing moving forward. Design controls around engineering workflows to eliminate latency and operational bottlenecks, ensuring compliance feels like an accelerator rather than a roadblock. Classified Systems & Hybrid Security Engineering Lead hands-on security engineering, vulnerability management, and continuous monitoring across classified program enclaves, air-gapped networks, and secure testing environments. Execute Risk Management Framework (RMF) and JSIG lifecycle tasks—including system hardening using STIGs/SCAP, vulnerability scanning (ACAS/Tenable), eMASS package management, System Security Plan (SSP) authoring, and POA&M remediation. Manage and optimize technical security controls (EDR, SIEM log aggregation, firewalls, identity platforms) across both enterprise and classified network environments. Leadership & Technical Ownership (Level 3) Act as a subject matter expert who tackles ambiguous, high-complexity security segmentation challenges with minimal supervision, taking full ownership from diagnosis to resolution. Partner with physical security, FSO, and ISSM staff to support secure facility operations, media sanitization, DCSA audit readiness, and classified authorization packages. Provide technical guidance and mentorship to junior staff and IT team members, translating complex federal regulations into clear, actionable advice for non-cyber stakeholders. Minimum Qualifications Active DoD Secret clearance required (Top Secret or TS/SCI eligibility highly preferred). 4+ years of dedicated cybersecurity engineering experience in DoD, cleared defense contractor, or high-rigor regulated environments. Current DoD 8570/8140 IAM/IAT Level II or III certification (e.g., Security+, CISSP, CISM, CASP+, or CySA+). Deep familiarity with government regulations, specifically NIST SP 800-171, CMMC Level 2, NIST SP 800-53, RMF, and JSIG requirements. Demonstrated experience executing STIG hardening, SCAP compliance scanning, vulnerability remediation, and EDR/SIEM administration across air-gapped or classified Windows/Linux environments. Proven track record of working constructively with engineering and business stakeholders—focusing on trust-building, communication, and enabling business outcomes rather than simple ticket-taking. Colorado law requires us to tell you the base compensation range of this role, which is $128,000 - $160,000, determined by your education, experience, knowledge, skills, and abilities. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Classification: Full-time Exempt Benefits Include: (Please note, Interns are not eligible for benefits) Unlimited PTO - Vacation, Sick, Personal, and Bereavement Paid Parental and Adoptive Leave Medical, Dental and Vision Insurance Tax Advantage Accounts (HSA/FSA) Employer Paid Short and Long Term Disability, Basic Life, AD&D Additional Benefit Options Including Voluntary Life and Emergency Medical Transport EAP Program Retirement Savings Plan - 401k with Company Match How To Apply Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants. NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role. Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We're an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please.

View Job