Threat Intelligence Specialist

• Collaborating with security engineering teams to create and test detection rules.
• Investigating potential cybersecurity incidents.
• Developing response processes and training security operations staff.
• Reviewing and tracking detected events to identify new exploits, threats and mitigation strategies, and enforce incident reporting standards.
• Leading in-depth technical analysis of new and emerging information security threats.
• Analyzing threats and vulnerabilities to determine their impact to the bank's operations.
• Assisting with investigations and eDiscovery efforts involving court-proven forensic processes and technologies.

Lead Threat Hunter

Security Analyst

• assess threats to ProMedica’s information technology resources and data
• develop policies, processes and procedures related to a comprehensive security program
• ensure compliance with IT security policies
• review security logs for suspicious activities
• investigate security incidents and upgrades
• perform risk assessments
• available for rotational, on-call 24/7 support

IT Security Analyst II

• Maintain ownership of assigned customer accounts, facilitate high levels of customer satisfaction, and be a trusted advisor for CAO Elite customers
• Perform threat hunting, research dark web data, and research tailored threat intelligence for CAO Elite customers based on their specific requirements and environment
• Prepare and deliver customer presentations relating to intelligence reports, dark web alerts, and threat hunting findings on a regular basis
• Respond to customer requests relating to threat intelligence, threat hunting, and dark web monitoring

Senior Threat Hunting Intelligence Analyst – Mountain/Pacific

• Direct proactive threat hunting campaigns to reveal advanced adversary activity
• Lead high-complexity hunting campaigns informed by threat intelligence and business risk
• Document hunting approach, research, and outcomes with actionable insights
• Leverage statistical and ML-based hunting methods to analyze large datasets
• Partner with Detection Engineering to convert hunt findings into durable detections
• Develop simple tools and automated solutions for hunting workflows
• Work closely with CSIRT, Threat Intelligence, Red Team, Security Engineering, and product teams
• Mentor others and share knowledge to raise the overall maturity and efficiency

Staff Cyber Threat Hunter

• Perform application security assessments using SAST, DAST, and interactive testing tools
• Identify, triage, and prioritize vulnerabilities across web, API, and microservices architectures
• Integrate security testing into CI/CD pipelines (DevSecOps)
• Assess security risks in AI/ML-enabled applications, including model exposure and inference endpoints
• Identify vulnerabilities such as adversarial inputs, model abuse, and data poisoning
• Secure AI APIs, plugins, and third-party integrations
• Implement and tune WAF, RASP, and API security controls
• Conduct threat modeling and secure design reviews for applications and AI use cases
• Assess and harden identity and access flows ensuring least privilege
• Partner with developers to remediate vulnerabilities and improve secure coding practices
• Monitor and respond to application-layer security incidents

AI Application Security Analyst – AppSec, ML Security

• conduct administrative tasks associated with the industrial security operation
• ensure compliance with Government regulations affecting the facility
• participate in the company’s export-compliance program
• identify and assist with investigations of any security violations and/or suspected compromises
• notify appropriate Government entities
• coordinate with the NITE Program Security Manager and other teammates as necessary
• provide assistance to NITE staff in connection with security matters
• proactively identify and apprise the FSO Lead and management of developments, problems, and/or general status of facility security operations
• provide support and assistance to other Mission Technology locations and subcontractor personnel on security issues as needed
• host Government assessors for security inspections at customer facilities as needed
• conduct classified meetings in accordance with the NISPOM and contractual security requirements
• provide oversight for all COMSEC matters to management, sub-contractors, and all personnel providing support on the contract

Senior Industrial Security Analyst

• Supports senior compliance team members and management with day-to-day operational and administrative activities.
• Assists with coordination and tracking of compliance initiatives, audit requests, and remediation activities.
• Maintains compliance documentation, evidence repositories, trackers, and reporting logs to ensure accuracy and completeness.
• Prepares presentations, status reports, meeting materials, and executive summaries for management and stakeholders.
• Provides light project management support, including meeting coordination, action item tracking, timeline monitoring, and follow-up activities.
• Assists with the execution and documentation of SOX, SOC 2, lender, and internal operational audit reviews.
• Gathers, organizes, and validates supporting documentation for audits and compliance assessments.
• Monitors task completion and escalates overdue items or risks to senior team members as appropriate.
• Supports process improvement initiatives and helps identify opportunities to enhance operational efficiency and compliance readiness.
• Collaborates with internal business partners to collect information and ensure timely responses to audit and compliance requests.
• Maintains confidentiality and handles sensitive information with professionalism and discretion.

Information Security Analyst

• Conduct system audits and continuous monitoring activities, covering all security controls, configurations, and operational processes to evaluate the security posture of the information systems.
• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy.
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Assist in the implementation of the required government policy, make recommendations on process tailoring, and participate in and document process activities.
• Work within strict program control processes to ensure mitigation of risks and support the Assessment and Authorization (A&A) of systems. This includes process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging‑technology research, inspections, and periodic audits.
• Support the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results and preparation of required reports.
• Document the results of A&A activities, and technical or coordination activities, and prepare the Risk Management Framework body of evidence.

Classified Cybersecurity Analyst – Top Secret

• Lead geopolitical and supply chain intelligence efforts in support of global operations, travel security, data center security, executive protection, and market expansion initiatives.
• Monitor and assess global events including armed conflict, terrorism, political instability, sanctions, civil unrest, organized crime, regional escalation, and infrastructure disruption, translating developments into actionable business risk assessments.
• Produce strategic, operational, and tactical intelligence products including forecasts, executive briefings, travel risk assessments, crisis updates, heat maps, geospatial overlays, dashboards, and early warning alerts.
• Identify, integrate, and manage intelligence collection pipelines leveraging open-source intelligence (OSINT), commercial intelligence feeds, geospatial data, proprietary sources, and third-party intelligence platforms.
• Design and automate intelligence workflows, alerting mechanisms, and analytical tooling to improve early warning, monitoring, and decision support capabilities.
• Support supply chain resilience efforts by identifying geopolitical, regional, logistical, and infrastructure-related risks that could impact operations, vendors, personnel, or critical dependencies.
• Partner cross-functionally with Global Security, Legal, Supply Chain, Strategy, Infrastructure, and business leadership teams to operationalize intelligence and support risk-informed decision making.
• Conduct post-incident analysis and lessons-learned reviews following geopolitical events, operational disruptions, or security incidents.
• Establish best practices, technical standards, and scalable processes for geopolitical and operational threat intelligence.
• Serve as a subject matter expert on geopolitical risk, strategic warning, and intelligence-driven security operations.
• Maintain relationships with external intelligence vendors, industry peers, academic institutions, and government or law enforcement partners, where appropriate.
• Mentor and guide junior analysts or engineers, share domain knowledge, and contribute to continuous improvement of the team.

Senior Threat Intelligence Specialist – Supply Chain, Geopolitical Security

• Synthesize and formulate guidance from a variety of information levels and sources (technical, business, field, external) and regularly present key takeaways to the field and to senior leadership
• Provide a field-actionable, in-depth, and ever-evolving understanding and analysis of competitive dynamics, relative to CrowdStrike solutions and capabilities
• Function as the company’s strategic advisor on this market, and become the “de facto” subject matter expert on the market for all business units and functions
• Provide tailored deal support (opportunity assessments & guidance), and develop a deep rapport with the field
• Work closely with multiple teams within CrowdStrike, including key stakeholders (Office of the CTO, field leadership, sales ops, product, and marketing teams), functioning as a primary liaison for cross-functional corporate initiatives relating to increasing market share including direct development of competitive support material and competitive readiness plans.
• Make recommendations on sales tactics and product strategy to enable CrowdStrike to win in the market.
• Be a self-starter with an ownership mentality. Work autonomously in the development of project plans, requirements, timelines, content, and ongoing tracking/updates of the competition.
• Leverage executive sponsorship to collaborate cross-functionally across the entire company to execute your programs and drive success.

Senior Competitive Intelligence Analyst, Platform Security

• Proactively conduct threat hunting activities across endpoints, networks, cloud environments, and security platforms.
• Monitor and analyze security alerts from SIEM, EDR, IDS/IPS, and other security tools.
• Investigate suspicious activities, indicators of compromise (IOCs), and potential security incidents.
• Perform incident triage, containment, remediation, and post-incident analysis.
• Develop and refine detection rules, use cases, and threat intelligence correlations.
• Analyze malware, phishing attempts, and attack patterns to identify emerging threats.
• Collaborate with IT, Engineering, and Infrastructure teams to strengthen security controls.
• Document investigations, findings, and remediation recommendations clearly and accurately.
• Support vulnerability management and security assessment initiatives.
• Stay current on cybersecurity trends, threat actors, tactics, techniques, and procedures (TTPs).

• Perform penetration testing of company owned application, networks, and systems
• Perform web application and cloud discovery, enumeration, and exploitation
• Assist in red team operations and adversary emulation exercises
• Assess and communicate the operational risks of exploitation
• Create testing plans and methods to find and confirm vulnerabilities
• Scope and assess the time needed to complete operational testing tasks
• Modify and adapt public exploit code and tools to meet operational requirements
• Utilize and develop automation where possible to save time and gain efficiency
• Serve as a subject matter expert to the organization for offensive security topics
• Provide expertise to security operations, threat intelligence, and forensics, as needed
• Work independently and troubleshoot technical and business process-related issues
• Experience supporting a variety of different offensive engagements for a large enterprise
• Ability to present complex topics, simply, to varying levels of the organization.

Offensive Security Analyst II

• Work on business systems design and configuration, as well as upgrades and improvements for assigned technology platforms.
• Identify issues that arise in the application area and work to resolve them.
• Perform impact analysis of desired changes, build and test systems changes, and identify areas of improvement.
• Act as a mentor to junior analysts on the team, support questions, and may delegate activities to other analysts.
• Liaise with business systems stakeholders and software vendors to ensure alignment of business needs with system changes.
• Provide end-user production support for issues entered into issue tracking systems.

Senior SAP Security Analyst

• Design and maintain analytical tools, evaluation methodologies, and quality metrics for intelligence workflows.
• Provide structure and technical rigor to analyst-built prototypes, redesigning workflows to be generalizable across use cases.
• Transform recurring needs into reusable templates, notebooks, graders, and lightweight tools.
• Surface novel harms and abuse patterns across a range of ecosystems and behaviors.
• Build rapid analysis workflows around emerging risks.
• Deliver, monitor, and maintain risk tools and dashboards.
• Use SQL, Python, and AI-powered tools to improve analysis speed, coverage, and consistency.

Technical Intelligence Analyst

• Provide operational support for IAM related administration tools
• Application onboarding and role definitions
• Recertification campaigns based on security and audit requirements
• Handling end user escalations and support requests
• Assist with improving the overall maturity of the internal IAM program
• Analyze, design, and implement improvements to data quality and role decisions across integrated systems
• Governance Initiatives, such as Entitlement Reviews and proper inventory management of identities
• Enhancing IAM posture including human and non-human identities
• Continually improve the IAM practice through platform enhancements, user process improvements and identity risk assessments
• Analyze access requirements, system flows, and security policies to enforce a strict Least Privilege access model while balancing user experience
• Design and implement scalable processes and/or technologies to improve the overall security posture of Addepar
• Assisting with the development and refinement of Information Security Policies & Standards
• Partner with the broader Security team to define the governance strategy and technical controls for Agentic AI Workflows, ensuring that autonomous agents and Non-Human Identities (NHIDs) operate within a secure, auditable, and least-privileged framework

Senior Information Security Analyst

• Monitor threats against Cisco executives and personnel via vendor intelligence feeds, law enforcement reports, and OSINT research, triaging and escalating based on an established risk matrix
• Produce and deliver risk assessments and recommendations ahead of executive travel and perform active monitoring of intelligence feeds to mitigate travel disruptions and risks
• Conduct security investigations and maintain awareness of persons of interest (POIs) and potential hostile actors
• Draft recurring reports analyzing internal threat metrics, emerging security TTPs, and geopolitical, cyber, and physical threats that may impact leadership, assets, or operations
• Contribute to ad-hoc advisories, presentations, and projects on executive security, internal risk, and travel risk management, collaborating with STO Global Security, Executive Protection teams, and partners
• Coordinate with Cisco vendors, internal stakeholders, and public/private partners to refine tooling, configure intelligence feeds, and liaise on risk concerns
• Provide on-site or remote intelligence support for corporate events, shareholder meetings, and high-profile engagements; assist with pre-event security planning

Protective Intelligence Analyst

• Lead day-to-day physical security operations for Dolby’s San Francisco headquarters
• Manage performance of Dolby’s U.S.-based security vendor
• Partner with the Global Security Operations Center (GSOC) on monitoring, reporting, and documentation
• Support security planning for onsite events, executive visits, and other high-profile activities
• Maintain consistent global response protocols and incident escalation practices
• Develop, standardize, and maintain global security procedures and post orders

Senior Global Security Analyst

• Product Security Analyst responsible for applying an interdisciplinary, collaborative approach to plan, design, develop, validate and verify lifecycle balanced information system security solutions.
• Implement cybersecurity features on program systems and implement RMF processes for embedded computing systems.
• Evaluates customer/operational needs to define and coordinate system security requirements, integrate technical parameters and assure compatibility of all physical, functional and program interfaces.
• Performs various analyses to optimize total system of systems and/or system architecture.
• Identifies assets and assesses risks, threats, and vulnerabilities of the product assets in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, non-repudiation and contract compliance.
• Evaluates remediation recommendations and develops a cost to mitigate estimate.
• Employs system security processes, methods, and tools and assures their consistent application.
• Resolves cross-functional technical issues.
• Implements appropriate Accreditation and Authorization (A&A) activities per ICD 503 RMF, NISPOM, or DoD Overprint to the NISPOM as required by customers.
• Coordinates with system administrators, network and software engineers, test and validation engineers and program management on security related activities and requirements.
• Travel (25%) will be required for meetings with customers, internal meetings, etc.

Cybersecurity Analyst – Product Security

• Perform routine and regularly scheduled maintenance and monitoring tasks on cloud products.
• Maintain security and perform threat investigation for enterprise systems.
• Participate in security assessment activities on IT systems and applications.
• Deploy and configure a wide variety of security technologies.
• Review and document incident response and remediation gaps.

Cybersecurity Analyst – Shift: Sunday to Thursday 3pm-12am PST

• Conduct system audits and continuous monitoring activities, covering all security controls, configurations, and operational processes to evaluate the security posture of the information systems.
• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy.
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Assist in the implementation of the required government policy, make recommendations on process tailoring, and participate in and document process activities.
• Work within strict program control processes to ensure mitigation of risks and support the Assessment and Authorization (A&A) of systems.

See all jobs on JobTailor