principal threat adversary operations engineer

cFocus Software Incorporated

<div><b>Position Title</b><br>
Threat Emulation &amp; Readiness Lead / Red Team Lead<br>
<b>Position Overview</b><br>
The Threat Emulation &amp; Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program.<br>
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&amp;CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness.<br>
<b>Key Responsibilities</b><ul><li>
Lead red team operations and adversary emulation exercises.
</li><li>Design and execute:
<ul><li>threat emulation campaigns,
</li><li>purple team exercises,
</li><li>tabletop exercises,
</li><li>crisis simulations,
</li><li>and readiness drills.
</li></ul></li><li>Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
</li><li>Develop attack chains aligned to:
<ul><li>MITRE ATT&amp;CK,
</li><li>intelligence reporting,
</li><li>and real-world threat actor behaviors.
</li></ul></li><li>Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
</li><li>Assess detection and response effectiveness across defensive technologies and operational workflows.
</li><li>Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
</li><li>Lead operational readiness assessments and continuous improvement initiatives.
</li><li>Brief executives and operational leadership on adversary risk and organizational readiness.
</li></ul><b>Required Qualifications</b><ul><li>
10+ years of offensive security or advanced cybersecurity operations experience.
</li><li>5+ years leading red team or adversary emulation operations.
</li><li>Experience conducting operations against:
<ul><li>enterprise Active Directory environments,
</li><li>cloud infrastructure,
</li><li>hybrid identity systems,
</li><li>and modern endpoint defenses.
</li></ul></li><li>Deep understanding of:
<ul><li>adversary tradecraft,
</li><li>post-exploitation,
</li><li>detection evasion,
</li><li>persistence,
</li><li>and lateral movement techniques.
</li></ul></li><li>Experience conducting purple team engagements and readiness exercises.
</li><li>Strong executive communication and briefing capabilities.
</li></ul><b>Preferred Certifications</b><ul><li>
OSCP
</li><li>OSEP
</li><li>CRTO
</li><li>GXPN
</li><li>GPEN
</li><li>CISSP
</li><li>MITRE ATT&amp;CK certifications</li></ul><p>
</p><p>byKblLEwvK</p></div>

AOUSC - Threat Emulation & Readiness Lead / Red Team Lead

<div><h1 class="jobSectionHeader"><b>Digital Forensics Engineer Job Description</b></h1><b>
Position Title: </b>Digital Forensics Engineer<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Digital Forensics Engineer supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by providing advanced digital forensics, incident response, cyber investigation, evidence preservation, malware analysis, and e-discovery support services.<br>
The Digital Forensics Engineer conducts complex forensic examinations involving workstations, servers, cloud platforms, mobile devices, email systems, network traffic, and enterprise applications in support of cybersecurity investigations, incident response activities, insider threat investigations, legal support actions, and enterprise cyber defense operations. The role supports 24x7x365 Security Operations Center (SOC) functions and coordinates closely with federal stakeholders, incident responders, threat hunters, legal teams, privacy personnel, and law enforcement partners.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Perform advanced digital forensic analysis and investigations in support of SBA ECS cybersecurity operations requirements.</li><li>
Support Task Areas 3.5.3 and 3.5.3.6 by conducting forensic examinations related to cybersecurity incidents, insider threats, malware infections, unauthorized access, and data exfiltration.</li><li>
Collect, preserve, analyze, and document digital evidence in accordance with federal forensic standards and chain-of-custody procedures.</li><li>
Perform host-based, network-based, cloud-based, and mobile device forensic investigations across enterprise environments.</li><li>
Conduct forensic acquisition and analysis of Windows, Linux, macOS, cloud, virtualized, and hybrid systems.</li><li>
Analyze endpoint telemetry, security logs, network packet captures (PCAP), SIEM data, and forensic artifacts to identify indicators of compromise (IOCs) and adversary activity.</li><li>
Support incident response activities by reconstructing attack timelines, determining root cause, identifying attack vectors, and assessing operational impact.</li><li>
Perform malware analysis and reverse engineering support activities to identify malicious behaviors, persistence mechanisms, and command-and-control communications.</li><li>
Support e-discovery operations including collection, indexing, preservation, processing, and review of electronically stored information (ESI).</li><li>
Conduct forensic examinations supporting legal, Inspector General (IG), Human Resources (HR), insider threat, privacy, and law enforcement investigations.</li><li>
Utilize forensic and cyber defense tools including EnCase, FTK, Velociraptor, Wireshark, Volatility, Splunk, Microsoft Defender, Sentinel, and endpoint detection and response (EDR) platforms.</li><li>
Perform memory analysis, disk analysis, registry analysis, browser artifact analysis, and log correlation activities.</li><li>
Develop forensic reports, technical findings, evidentiary documentation, executive briefings, and remediation recommendations.</li><li>
Maintain detailed forensic documentation, evidence handling procedures, and chain-of-custody records.</li><li>
Support cybersecurity monitoring, detection, containment, eradication, and recovery activities within the SOC environment.</li><li>
Coordinate with SOC analysts, incident responders, threat hunters, engineers, and federal stakeholders during cyber investigations and breach response activities.</li><li>
Support continuous improvement of forensic methodologies, investigative procedures, and cybersecurity operational capabilities.</li><li>
Assist with the development and maintenance of digital forensic playbooks, standard operating procedures (SOPs), and incident handling guidance aligned with NIST SP 800-61 and NIST SP 800-86.</li><li>
Research emerging cyber threats, adversary tactics, techniques, and procedures (TTPs), and evolving forensic technologies.</li><li>
Support federal cybersecurity compliance requirements, reporting activities, and operational readiness initiatives.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Digital Forensics, Information Assurance, Information Technology, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 8 years of experience supporting digital forensics, cyber investigations, incident response, cybersecurity operations, or Security Operations Center (SOC) environments.</li><li>
Hands-on experience conducting enterprise-level forensic investigations and evidence analysis.</li><li>
Experience with forensic acquisition and analysis tools including EnCase, FTK, X-Ways, Velociraptor, Volatility, or equivalent technologies.</li><li>
Experience analyzing Windows, Linux, cloud, mobile, and network forensic artifacts.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting legal hold, e-discovery, insider threat, and regulatory investigation activities.</li><li>
Experience with SIEM, EDR, IDS/IPS, packet analysis, and security monitoring technologies.</li><li>
Strong understanding of NIST cybersecurity standards including NIST SP 800-61 and NIST SP 800-86.</li><li>
Ability to prepare technical forensic reports and present investigative findings to technical and executive stakeholders.</li><li>
Strong analytical, investigative, communication, and technical documentation skills.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
EnCase Certified Examiner (EnCE)</li><li>
Certified Computer Examiner (CCE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA CySA+</li><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li></ul><p>
</p><p>6HY6JyRiD8</p></div>

SBA - Digital Forensics Engineer

<div><h1 class="jobSectionHeader"><b>Cyber Threat Intelligence Analyst Job Description</b></h1><b>
Position: </b>Cyber Threat Intelligence Analyst<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cyber Threat Intelligence Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cyber threat intelligence, threat analysis, proactive threat hunting, and operational cybersecurity support services.<br>
The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating actionable cyber threat intelligence to support the SBA Security Operations Center (SOC), cybersecurity operations, incident response activities, and enterprise risk mitigation efforts. The position supports 24x7x365 cybersecurity operations through advanced analysis of indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), emerging vulnerabilities, and threat actor activity impacting federal information systems and cloud environments.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide cyber threat intelligence and operational analysis support for the SBA SOC in support of Task Area 3.5.3 Cybersecurity Operations Support.</li><li>
Conduct proactive cyber threat hunting activities across enterprise systems, cloud environments, endpoints, and network infrastructure.</li><li>
Analyze indicators of compromise (IOCs), threat actor tactics, techniques, and procedures (TTPs), malware behaviors, and emerging cyber threats.</li><li>
Monitor and evaluate cyber threat intelligence feeds, vendor reporting, CISA advisories, US-CERT alerts, and external intelligence sources.</li><li>
Perform advanced correlation and analysis of security events, SIEM data, IDS/IPS alerts, EDR telemetry, DNS logs, firewall logs, and network traffic.</li><li>
Support incident response and cybersecurity investigations through intelligence-driven analysis and threat attribution support.</li><li>
Develop cyber threat intelligence reports, operational briefings, situational awareness products, and executive-level summaries.</li><li>
Assist with the identification of previously unknown attack vectors and suspicious activity through threat hunting and anomaly analysis.</li><li>
Support digital forensics and incident analysis activities in coordination with SOC analysts, engineers, and incident responders.</li><li>
Develop and maintain threat intelligence playbooks, threat models, attack scenarios, and adversary profiles.</li><li>
Perform analysis of cloud security events and cyber threats impacting Microsoft 365, Azure, AWS, Salesforce, and hybrid cloud environments.</li><li>
Conduct research on advanced persistent threats (APTs), ransomware groups, insider threats, nation-state actors, and emerging cyber attack trends.</li><li>
Provide recommendations for defensive countermeasures, detection logic improvements, and enhanced security monitoring capabilities.</li><li>
Assist in the development of threat signatures, SIEM use cases, detection analytics, and threat detection content.</li><li>
Support continuous improvement of cybersecurity operations, threat intelligence workflows, and incident response processes.</li><li>
Coordinate with federal stakeholders, law enforcement, privacy officials, insider threat teams, and mission partners during cyber incident activities.</li><li>
Document investigative findings, intelligence assessments, and operational actions within case management and reporting systems.</li><li>
Participate in SOC operational meetings, shift briefings, incident coordination calls, and cybersecurity readiness activities.</li><li>
Maintain awareness of evolving cybersecurity technologies, federal threat reporting requirements, and NIST cybersecurity guidance.</li><li>
Support cybersecurity communications, intelligence sharing, and collaboration activities across the SBA enterprise.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Assurance, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 5 years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, or SOC operations.</li><li>
Experience analyzing threat intelligence, indicators of compromise, adversary TTPs, and cybersecurity attack methodologies.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, network analysis, and cyber defense tools.</li><li>
Experience conducting threat hunting and advanced event correlation across enterprise environments.</li><li>
Knowledge of federal cybersecurity frameworks and guidance including NIST SP 800-61, NIST SP 800-53, and CISA operational guidance.</li><li>
Understanding of MITRE ATT&amp;CK framework and cyber kill chain methodologies.</li><li>
Experience with cloud security monitoring and threat analysis in Microsoft Azure, AWS, Microsoft 365, and hybrid environments.</li><li>
Strong analytical, investigative, communication, and reporting skills.</li><li>
Ability to support 24x7x365 cybersecurity operational environments.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
GIAC Cyber Threat Intelligence (GCTI)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA CySA+</li><li>
Certified Ethical Hacker (CEH)</li><li>
Splunk Enterprise Security Certified Admin</li><li>
Microsoft Security Operations Analyst Associate (SC-200)</li></ul><p>
</p><p>Pw75tUj9Bf</p></div>

SBA - Cyber Threat Intelligence Analyst

Saronic Technologies

<div><div><h2 class="jobSectionHeader"><b>Location</b></h2>
<p>Austin, TX</p>
</div><div><h2 class="jobSectionHeader"><b>Employment Type</b></h2>
<p>Full time</p>
</div><div><h2 class="jobSectionHeader"><b>Location Type</b></h2>
<p>On-site</p>
</div><div><h2 class="jobSectionHeader"><b>Department</b></h2>
<p>Software</p></div></div>
<br><div><div><p>Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.</p>
<p></p><p>Security at Saronic is a force multiplier. We're seeking a Security Engineer at the senior-level or above on our Security Operations team with strong detection engineering experience. You'll design and develop high-fidelity detection content, build and operate the data pipelines that power our security operations, develop automation playbooks that accelerate response, and work across a uniquely diverse telemetry landscape spanning cloud infrastructure, embedded vessel platforms, corporate systems, and operational technology.</p><br>
<div></div><p>This role is heavily weighted toward detection engineering. You should think in terms of adversary behavior and telemetry coverage, not just alert triage. You'll own detections end-to-end: from identifying gaps in coverage, through designing and testing detection logic, to tuning and validating in production.</p>
<p></p><h1 class="jobSectionHeader"><b>Key Responsibilities:</b></h1>
<ul><li><p>Design, build, test, and tune high-fidelity detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry sources</p>
</li><li><p>Develop and maintain detection content using detection-as-code practices including version-controlled logic, automated testing, and CI/CD deployment</p>
</li><li><p>Map detection coverage to MITRE ATT&amp;CK, identify gaps, and prioritize new detection development based on threat intelligence and business risk</p>
</li><li><p>Engineer correlation rules, behavioral analytics, and anomaly-based detections that minimize false positives while surfacing real adversary tradecraft</p>
</li><li><p>Own the detection lifecycle from initial development through production tuning, performance monitoring, and retirement</p>
</li><li><p>Build and operate pipelines to ingest, normalize, enrich, and manage security telemetry at scale across diverse data sources, using Terraform and infrastructure-as-code practices to deploy and maintain logging and detection infrastructure</p>
</li><li><p>Design and maintain log collection, parsing, and enrichment configurations that ensure the right telemetry is available at the right fidelity for detection and investigation</p>
</li><li><p>Evaluate and onboard new telemetry sources as Saronic's infrastructure and threat landscape evolve</p>
</li><li><p>Monitor pipeline health, data quality, and ingestion reliability to ensure detections operate on complete and accurate data</p>
</li><li><p>Develop and manage automated response playbooks in SOAR platforms to accelerate containment and reduce analyst toil</p>
</li><li><p>Build automation that enriches alerts with contextual data, reducing investigation time and improving analyst decision-making</p>
</li><li><p>Support incident response efforts and translate lessons learned into improved detections and playbooks</p>
</li><li><p>Partner with SOC analysts, Cloud Security, Product Security, and IT teams to close visibility and detection gaps across environments</p>
</li><li><p>Collaborate with threat intelligence to ensure detection engineering is informed by current adversary TTPs relevant to defense, maritime, and autonomous systems</p>
</li></ul><p></p><h1 class="jobSectionHeader"><b>Required Qualifications:</b></h1>
<ul><li><p>3+ years of hands-on experience in detection engineering, security operations, security automation, or a closely related security engineering role</p>
</li><li><p>Demonstrated experience designing, testing, and tuning detection rules and analytic queries across production security telemetry (endpoint, cloud, network, identity, or DLP)</p>
</li><li><p>Hands-on experience with SIEM platforms and proficiency with query languages such as SPL, KQL, or equivalent</p>
</li><li><p>Experience building and operating security data pipelines, including log ingestion, normalization, enrichment, and data quality management</p>
</li><li><p>Understanding of data engineering concepts including ETL pipelines, data modeling, schema design, and indexing as applied to security telemetry</p>
</li><li><p>Hands-on coding experience in Python, PowerShell, Go, or Rust for security automation, detection tooling, or pipeline development, and familiarity with Terraform for managing detection and logging infrastructure as code</p>
</li><li><p>Understanding of MITRE ATT&amp;CK framework and its application to detection coverage and gap analysis</p>
</li><li><p>Ability to obtain and maintain a security clearance</p>
</li></ul><p></p><h1 class="jobSectionHeader"><b>Preferred Qualifications:</b></h1>
<ul><li><p>Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments</p>
</li><li><p>Experience with EDR platforms including custom detection rule creation and telemetry analysis</p>
</li><li><p>Experience with cloud-native detection in AWS and Microsoft 365/Azure</p>
</li><li><p>Experience using Terraform to deploy and manage security monitoring infrastructure, log pipeline components, or cloud-native security service configurations</p>
</li><li><p>Hands-on experience with incident response, threat hunting, or adversary emulation</p>
</li><li><p>Exposure to embedded Linux, operational technology, or ICS telemetry and detection</p>
</li><li><p>Familiarity with NIST SP 800-171, NIST SP 800-53, or CMMC and their logging and monitoring requirements</p>
</li><li><p>Relevant certifications such as GCIH, GCIA, GCDA, GSOM, OSDA, or OSCP</p>
</li></ul><p></p><h1 class="jobSectionHeader"><b>Benefits:</b></h1>
<ul><li><p><b>Medical Insurance: </b>Comprehensive health insurance plans covering a range of services</p>
</li><li><p>Saronic pays 100% of the premium for employees and 80% for dependents</p>
</li><li><p><b>Dental and Vision Insurance: </b>Coverage for routine dental check-ups, orthodontics, and vision care</p>
</li><li><p>Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents</p>
</li><li><p><b>Time Off: </b>Generous PTO and Holidays</p>
</li><li><p><b>Parental Leave: </b>Paid maternity and paternity leave to support new parents</p>
</li><li><p><b>Competitive Salary: </b>Industry-standard salaries with opportunities for performance-based bonuses</p>
</li><li><p><b>Retirement Plan:</b> 401(k) plan</p>
</li><li><p><b>Stock Options:</b> Equity options to give employees a stake in the company&rsquo;s success</p>
</li><li><p><b>Life and Disability Insurance:</b> Basic life insurance and short- and long-term disability coverage</p>
</li><li><p><b>Pet Insurance:</b> Discounted pet insurance options including 24/7 Telehealth helpline</p>
</li><li><p><b>Additional Perks:</b> Free lunch benefit and unlimited free drinks and snacks in the office</p><br>
</li></ul><div></div><p><i>This role requires access to export-controlled information or items that require &ldquo;U.S. Person&rdquo; status. As defined by U.S. law, individuals who are any one of the following are considered to be a &ldquo;U.S. Person&rdquo;: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in </i><i>8 U.S.C. 1324b(a)(3)</i><i>.</i></p>
<p>Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.</p></div></div><p></p>

Security Engineer, Detection Engineering

<div><h1 class="jobSectionHeader"><b>Cybersecurity Engineer - Sr. Job Description</b></h1><b>
Position Title: </b>Cybersecurity Engineer Sr<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cybersecurity Engineer - Sr. supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cybersecurity engineering, security operations, systems hardening, cloud security, zero trust architecture, and enterprise cyber defense support services.<br>
The Cybersecurity Engineer - Sr. serves as a senior technical leader responsible for designing, implementing, integrating, securing, and optimizing enterprise security architectures across on-premises, cloud, hybrid, and SaaS environments. The position supports 24x7x365 Security Operations Center (SOC) activities and works closely with federal stakeholders, engineers, SOC analysts, architects, incident responders, and program leadership to enhance the cybersecurity posture of SBA enterprise systems and critical assets.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide senior-level cybersecurity engineering support for SBA ECS enterprise cybersecurity operations.</li><li>
Support Task Areas 3.5.3 and 3.5.3.9 by designing, implementing, and maintaining secure enterprise security architectures and cybersecurity engineering solutions.</li><li>
Develop and maintain cybersecurity engineering standards, architecture diagrams, implementation strategies, and technical security documentation.</li><li>
Engineer and implement security controls aligned with NIST, FISMA, Zero Trust Architecture (ZTA), and federal cybersecurity requirements.</li><li>
Design, integrate, configure, and support security technologies including SIEM, SOAR, IDS/IPS, EDR, DLP, MFA, PKI, NAC, firewalls, secure web gateways, and cloud-native security solutions.</li><li>
Provide advanced engineering support for Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network environments.</li><li>
Support cybersecurity monitoring, detection, containment, remediation, and recovery activities within the SOC environment.</li><li>
Perform enterprise systems hardening, vulnerability remediation, security baseline implementation, and secure configuration management.</li><li>
Conduct cybersecurity architecture assessments, threat modeling, security engineering reviews, and technical risk analysis activities.</li><li>
Support implementation and optimization of Zero Trust security capabilities including identity security, micro-segmentation, continuous monitoring, and least privilege access models.</li><li>
Design and implement cybersecurity solutions supporting cloud migration, DevSecOps, container security, and automation initiatives.</li><li>
Support incident response investigations by providing engineering expertise, log analysis, root cause analysis, and remediation recommendations.</li><li>
Collaborate with cybersecurity operations teams to develop detection logic, security use cases, automated workflows, and threat response procedures.</li><li>
Perform system security engineering activities throughout the system development lifecycle (SDLC) and support Authority to Operate (ATO) initiatives.</li><li>
Develop and maintain security architecture roadmaps, engineering plans, and technology modernization strategies.</li><li>
Perform security engineering analysis of enterprise applications, APIs, databases, cloud services, and network infrastructures.</li><li>
Support cybersecurity compliance efforts related to NIST SP 800-53, NIST SP 800-171, FedRAMP, CISA guidance, and federal cybersecurity mandates.</li><li>
Provide technical leadership and mentoring to junior cybersecurity engineers, SOC personnel, and technical staff.</li><li>
Prepare technical reports, engineering documentation, executive briefings, and operational recommendations.</li><li>
Research emerging cyber threats, adversary tactics, and evolving security technologies to improve enterprise defense capabilities.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Systems Engineering, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 10 years of experience supporting cybersecurity engineering, cybersecurity operations, enterprise security architecture, or SOC environments.</li><li>
Demonstrated experience designing and implementing enterprise cybersecurity architectures and engineering solutions.</li><li>
Hands-on experience with SIEM, SOAR, EDR, IDS/IPS, firewalls, vulnerability management, IAM, cloud security, and security automation technologies.</li><li>
Strong knowledge of NIST cybersecurity frameworks, federal security standards, and Zero Trust Architecture principles.</li><li>
Experience supporting Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network infrastructures.</li><li>
Experience performing system hardening, secure configuration management, and vulnerability remediation.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting RMF, ATO, continuous monitoring, and federal cybersecurity compliance activities.</li><li>
Strong analytical, troubleshooting, technical writing, and communication skills.</li><li>
Ability to present technical findings and cybersecurity recommendations to executive leadership and technical stakeholders.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
GIAC Certified Enterprise Defender (GCED)</li><li>
GIAC Security Expert (GSE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA Security+</li><li>
CompTIA CySA+</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Certified: Cybersecurity Architect Expert</li><li>
Cisco Certified CyberOps Professional</li></ul><p>
</p><p>Q92uPhlSIK</p></div>

SBA - Cybersecurity Engineer - Sr

The Home Depot

<div><p><b>Position Purpose:</b></p><p>
Protect what matters most to our associates and customers by leading offensive security capabilities across the enterprise. This role drives strategic and operational excellence across threat intelligence, investigations, and offensive security to proactively identify, assess, and mitigate advanced cyber threats.</p><p></p><p><b>
Key Responsibilities</b></p><ul><li>
Lead and scale Offensive Security functions within the Security Operations organization</li><li>
Oversee proactive and reactive investigations, including advanced threat analysis, incident response support, and adversary‑focused operations</li><li>
Drive offensive security strategies (e.g., threat‑informed testing, red‑team‑aligned activities) to strengthen detection and response capabilities</li><li>
Partner cross‑functionally to reduce mean time to detect, investigate, and contain security incidents</li><li>
Establish tactical and strategic roadmaps aligned to SOC and multi‑year cybersecurity objectives</li><li>
Mentor and develop high‑performing leaders and teams; serve as a subject‑matter expert in threat investigations and offensive security disciplines</li></ul><p></p><p><b>
Preferred Qualifications</b></p><ul><li>
Experience leading cyber threat investigations, threat intelligence, or offensive security teams</li><li>
Strong background in incident response, security operations, and adversary tradecraft</li><li>
Proven people leadership with experience managing multiple teams and senior‑level stakeholders</li><li>
Ability to translate threat insights into actionable, business‑relevant recommendations</li></ul><p><b>
Key Responsibilities:</b></p><ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Collaborate cross functionally to reduce vulnerabilities, risk and incident management; Drive cross-functional alignment; Asses, develop, implement and maintain strategies to assess and resolve security risk across the enterprise; Provide leadership, mentoring and coaching to direct reports and other leaders</li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p><ul><li>
This position typically reports to Director or Sr. Director</li><li>
This position has 6-10 Direct Reports</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul><p><b><br>
Preferred Qualifications:</b></p><ul><li>
4+ years of previous leadership experience</li></ul><p><b><br>
Minimum Education:</b></p><ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
8+</li></ul><p><b><br>
Competencies:</b></p><ul><li>
Decision Quality</li><li>
Ensures Accountability</li><li>
Plans and Aligns</li><li>
Develops Talent</li></ul></div><p></p>

Cybersecurity Senior Manager | Offensive Security (Remote)

Alignerr

<div>
 <strong>
  Threat Intelligence Analyst (AI Training)
  <br/>
  <br/>
 </strong>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 Your threat intelligence skills are in demand &mdash; not just in the SOC, but on the frontier of AI development. At Alignerr, we partner with the world's leading AI research labs to build and train cutting-edge AI models. We're looking for experienced threat intelligence analysts to help shape how AI understands, reasons about, and communicates real-world cyber threats.
 <br/>
 <br/>
 This is a unique opportunity to apply your hands-on knowledge of adversary behavior, TTPs, and CTI workflows to a problem that matters: making AI smarter and more accurate in the cybersecurity domain.
 <br/>
 <br/>
 <ul>
  <li>
   Organization: Alignerr
  </li>
  <li>
   Type: Hourly Contract
  </li>
  <li>
   Location: Remote
  </li>
  <li>
   Commitment: 10&ndash;40 hours/week
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You'll Do
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Analyze and classify threat reports, adversary campaigns, and attacker behavior for use in AI training datasets
  </li>
  <li>
   Evaluate indicators of compromise, TTPs, and end-to-end attack narratives for accuracy and real-world plausibility
  </li>
  <li>
   Generate, structure, and validate threat intelligence data used to train and benchmark AI systems
  </li>
  <li>
   Review AI-generated cybersecurity outputs and assess them for technical accuracy, realism, and consistency
  </li>
  <li>
   Apply your field knowledge to distinguish authentic attacker behavior from noise, fabrications, or low-quality data
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Who You Are
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   2+ years of experience in threat intelligence, SOC analysis, or security research
  </li>
  <li>
   Familiar with MITRE ATT&amp;CK, OSINT collection methodologies, or CTI workflows
  </li>
  <li>
   Able to critically evaluate threat reports and attack narratives with a trained eye
  </li>
  <li>
   Strong analytical and written communication skills &mdash; you can explain complex threats clearly
  </li>
  <li>
   Self-motivated and comfortable working independently on async, task-based assignments
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Nice to Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience writing or editing threat intelligence reports or advisories
  </li>
  <li>
   Familiarity with threat actor tracking, campaign attribution, or malware analysis
  </li>
  <li>
   Background in red team operations, incident response, or digital forensics
  </li>
  <li>
   Prior exposure to AI or machine learning workflows
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why Join Us
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work directly on frontier AI systems alongside top research labs
  </li>
  <li>
   Fully remote and flexible &mdash; work on your own schedule, on your own terms
  </li>
  <li>
   Freelance autonomy with meaningful, intellectually engaging work
  </li>
  <li>
   Apply deep domain expertise in a high-impact, emerging field
  </li>
  <li>
   Potential for ongoing work and contract extension as projects grow
  </li>
 </ul>
</div>


Threat Intelligence Analyst

Search 10000+ Principal threat adversary operations engineer jobs near you this May. New roles added regularly across leading industries. Apply today.