Incident Response Analyst

Location: Hybrid,Tampa, FL / Remote 

While proximity to Tampa is preferred to support a hybrid schedule in our Tampa Center of Excellence, we’re open to remote candidates who can support the Eastern Time Zone.

Reporting  to the Manager of Adversary Response, the Incident Response Analyst operates on the front lines of active cyber conflict—defending organizations against sophisticated, real-world adversaries. This is a mission-critical role for practitioners who thrive in high-pressure environments and are driven to outpace, outthink, and disrupt advanced threat actors.
As a primary responder during live incident engagements, you will lead hands-on investigations into complex intrusions, leveraging advanced EDR and detection platforms to trace attacker behavior, contain threats in real time, and eradicate adversary presence at its source.
This role demands sharp analytical instincts, technical depth, and a relentless curiosity—paired with the discipline to execute under pressure. You won’t just respond to incidents; you’ll play a key role in defending critical environments, strengthening resilience, and raising the bar against an ever-evolving threat landscape.

In this role, you’ll get to:

• Lead end-to-end incident response engagements within customer environments, driving rapid investigation, containment, and remediation of active threats
• Conduct deep-dive forensic and malware analysis to uncover adversary tactics, techniques, and procedures (TTPs), translating findings into actionable intelligence
• Proactively hunt for advanced threats through hypothesis-driven threat hunting across diverse data sources and telemetry
• Triage and validate suspicious activity using a combination of open-source intelligence (OSINT), proprietary intelligence, and behavioral analysis
• Own the documentation of incidents, ensuring clear, defensible reporting and timeline reconstruction within case management systems
• Identify and operationalize new adversary techniques, tools, and tradecraft—scaling knowledge across the team to strengthen collective defense
• Maintain a constant pulse on the evolving threat landscape, applying emerging intelligence to real-world investigations
• Surface visibility gaps in logging, telemetry, and detection coverage, and partner with stakeholders to enhance overall security posture
• Collaborate cross-functionally to develop and refine detection content, response playbooks, and threat intelligence outputs
• Serve as a trusted advisor to customers, confidently guiding them through the full incident response lifecycle—from initial compromise to full remediation and recovery

• Proven, hands-on experience leading incident response investigations, with the ability to independently scope, analyze, and drive complex engagements to resolution
• A track record of operating in high-volume, high-complexity environments (e.g., MDR, MSSP, consulting, or enterprise IR teams), with exposure to a wide range of real-world incidents and adversary scenarios
• Deep expertise with Endpoint Detection & Response (EDR) platforms such as SentinelOne, Microsoft Defender, and CrowdStrike, including advanced querying, triage, and response actions
• Strong command of incident response methodologies and frameworks (e.g., NIST, PICERL), with the ability to apply them dynamically in fast-moving, ambiguous situations
• Experience leveraging SIEM, SOAR, case management, and threat intelligence platforms to investigate, correlate, and respond to threats at scale
• A solid understanding of attacker methodologies, including common and emerging tactics, techniques, and procedures (TTPs), with the ability to map activity to frameworks such as MITRE ATT&CK
• Exceptional communication skills, with experience presenting technical findings and strategic recommendations to both technical teams and executive stakeholders
• The ability to operate as a trusted advisor during high-pressure incidents—bringing clarity, structure, and confidence to customer engagements

Note: This role is best suited for practitioners who have been deeply immersed in live incident response environments and have built pattern recognition across numerous engagements. Candidates with limited exposure to real-world incidents may find the pace, ambiguity, and complexity of this role challenging.

Statutory Pay Disclosure 

The anticipated salary range for this role is $127,00 - $140,000 + stock options + benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States; 
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.

Overview:  The Technical Product Support Analyst II will respond to inbound customer requests (phone, email, chat) to provide technical assistance on Inovalon’s supported products. The position will provide support for application software, operating systems and integrated 3rd party products to customers and vendors.  Manages progress toward resolution and documents customer communication throughout the “life-cycle” of a reported issue.

Duties and Responsibilities:

• Answer inbound customer requests via telephone, email or chat or any additional method of inbound communication; demonstrate proficiency with all internal tools.  Outbound calls and meetings also included;
• Contact and interface for customers regarding support, troubleshooting and problem resolution;
• Resolve technical support issues for Inovalon supported products within identified timeframes with a focus on first call resolution;
• Identify beneficial product opportunities for existing customers and communicate to sales team via workflow process;
• Ability to deescalate customer’s and resolve customer technical escalations;
• Create knowledge articles to assist department in resolving known customer issues;
• Document all activities with customers in CRM per defined process and procedures;
• Resolve open cases within specified guidelines;
• Elevate issues following escalation procedure timely and as appropriate;
• Other duties as assigned;
• Maintain compliance with Inovalon’s policies, procedures and mission statement;
• Adhere to all confidentiality and HIPAA requirements as outlined within Inovalon’s Operating Policies and Procedures in all ways and at all times with respect to any aspect of the data handled or services rendered in the undertaking of the position; and
• Fulfill those responsibilities and/or duties that may be reasonably provided by Inovalon for the purpose of achieving operational and financial success of Employer.

Job Requirements:

• Minimum of 2 years’ experience in customer service;
• Experience with MS Office Products;
• Experience multi-tasking in a fast paced, detail-oriented environment;
• Experience working independently;
• Experience working with cross-functional teams;
• Experience with problem-solving;
• Knowledge working with Problem Management, Records Management ticketing system (Salesforce);
• Minimum 3 years’ experience in a call center environment with high volume of transactions is preferred;
• Experience in Healthcare IT industry or medical billing experience is preferred;
• Experience in Software Technical Support is preferred;
• Healthcare EDI Knowledge (ANSI 835, 837, 270/271) is preferred;
• Experience with using and supporting Software as a Service (SaaS) is preferred;
• Experience using multiple Operating Systems such as Linux and Windows a plus; and
• Experience organizing and managing workload efficiently and prioritizing projects is preferred.

Education:

• High School Graduate or General Education Degree (GED) is required;
• Associate degree is preferred.

Physical Demands and Work Environment:

• Sedentary work (i.e. sitting for long periods of time);
• Exerting up to 10 pounds of force occasionally and/or negligible amount of force;
• Frequently or constantly to lift, carry push, pull or otherwise move objects and repetitive motions;
• Subject to inside environmental conditions; and
• Travel for this position will include less than 5% locally usually for training purposes.

Security Analyst II (Weekday Afternoons)

Hybrid, Tampa, FL

• Training schedule: (first 45 to 60 days)
  -Monday and Friday (Remote) - 9AM to 5PM
  -Tuesday, Wednesday & Thursday in the office - 9AM to 5PM
• Upon completion of training:
  - Monday and Friday (Remote) - 2PM-10PM
  - Tuesday, Wednesday and Thursday in the office - 2PM-10PM

Deepwatch is looking for a highly motivated, self-driven, technical analyst dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. The Deepwatch Security Operations Center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real-time for our customers. 

The Deepwatch Security Operations Center is a unique approach to how we support our customers and ultimately provide an experience not found anywhere else. You’ll be an integral part of supporting our customers by understanding their bespoke environment, needs and challenges. You will be playing a key role in supporting some of the top organizations in the world, and have the opportunity to develop your skills by working with the best responders in the industry, your team and your shift !

In this role, you’ll get to:

• Support incident handling processes across multiple platforms and security technologies including Windows, Linux and macOS
• Provide in depth analysis from escalated requests originating from Security Analyst 1
• Validate suspicious events by performing investigations using SIEM and SOAR technologies, leveraging Deepwatch proprietary tooling, intelligence and OSINT, TTPs and IOCs
• Identify gaps in customer environments, data ingested or configuration errors which reduce telemetry quality
• Work with customer and leadership to surface and resolve concerns
• Provide support to Security Analyst I including coaching and training as necessary
• Leverage your knowledge of Alert Triage, SOC Operations, and Defense in Depth (DiD) to contribute to projects for overall customer success
• Produce high-quality written and verbal communications, recommendations, and findings to customer management in a timely manner
• Surface opportunities for improvement in the SOC and for the customer and be a change agent for measurably improving our customer security posture and experience
• Continue to sharpen your skills and capabilities on the job, and through the Deepwatch development program

To be successful in this role you’ll need to:

• Experience as an analyst in Security Operations Center; MSSP environment preferred
• Have a strong understanding of cyber security principles, concepts and practices including the ability to perform a complete and thorough incident investigation and triage with limited support 
• Know your way around SIEM platforms (Splunk required, Google SecOps or Microsoft Sentinel preferred), how to perform queries and leverage various log sources to perform investigations
• Competency with in-depth header analysis, hashes and Windows/macOS/Linux logs
• Demonstrate the ability to pivot to other log sources, cloud systems or consoles to perform a comprehensive analysis from multiple data sources
• Have a basic understanding of modern EDR, email security and cloud identity platforms
• A desire to support others and uplift the program and team through updating training materials and SOPs
• Strong written and verbal communication skills including the ability to compose detailed reports and analysis that’s thorough, accurate and complete
• Experience with ticketing systems, ServiceNow preferred
• Sec+, CySA, CEH, GSEC, or equivalent certification preferred

Statutory Pay Disclosure:

The anticipated salary range for this role is $77,500 - $97,000 + stock options + benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States; 
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.

Overview:  The Principal Pricing Analyst will be responsible for enhancing and improving the pricing process and models to align with the Company’s pricing strategy. Focused on the Provider Business Unit software products. 

Duties and Responsibilities:

• Enhance the pricing process to more closely align with the Company’s pricing strategy.
• Improve pricing models to better leverage existing internal market and product intelligence, enhancing the accuracy of pricing and better articulating the value proposition of the company’s product offerings.
• Assume hands-on role in transitioning and maintaining excel pricing models into Salesforce CPQ system.
• Support mid-size to large size Business Unit in Pricing Strategy and Contract reviews.
• Develop and prepare complex pricing proposals in response to customer requirements.
• Create and own tracking system for all financial exceptions in customer contracts.
• Collaborate closely with Inside/Outside Sales, Finance, Legal, and Product Development teams.
• Own monthly, quarterly, and ad hoc management reporting and supporting analysis and insight by providing support to FP&A Team.
• Promote and ensure compliance with of company’s standard pricing processes.
• Maintain compliance with Inovalon’s policies, procedures and mission statement.
• Adhere to all confidentiality and HIPAA requirements as outlined within Inovalon’s Operating Policies and Procedures in all ways and at all times with respect to any aspect of the data handled or services rendered in the undertaking of the position.
• Fulfill those responsibilities and/or duties that may be reasonably provided by Inovalon for the purpose of achieving operational and financial success of the Employer.

Job Requirements:

• 8+ years of experience in pricing, finance, sales operations, business management, technology or relevant experience.
• Ability to meet deadlines and work under pressure on multiple concurrent projects.
• Excellent analytical skills and the ability to extrapolate data, interpret, and create course of action; strong Excel skills, particularly the ability to build and enhance models.
• Experience with business technologies especially Salesforce.com;
• Strong project management skills and experience.
• Ability to keep track of timelines and deliverables work under firm deadlines within a rapidly changing environment involving multiple projects and initiatives.
• Excellent verbal, presentation and written communication skills.
• Experience with Configure-Price-Quote technology a plus.

Education:

• Associate’s Degree in relevant field, Bachelor’s Degree preferred.

Physical Demands and Work Environment:

• Sedentary work ( i.e. sitting for long periods of time).
• Exerting up to 10 pounds of force occasionally and/or negligible amount of force.
• Frequently or constantly to lift, carry push, pull or otherwise move objects and repetitive motions.
• Subject to inside environmental conditions.
• Travel for this position will include less than 5% locally usually for training purposes.

Overview:  The Principal Pricing Analyst will be responsible for enhancing and improving the pricing process and models to align with the Company’s pricing strategy. Focused on the Provider Business Unit software products. 

Duties and Responsibilities:

• Enhance the pricing process to more closely align with the Company’s pricing strategy.
• Improve pricing models to better leverage existing internal market and product intelligence, enhancing the accuracy of pricing and better articulating the value proposition of the company’s product offerings.
• Assume hands-on role in transitioning and maintaining excel pricing models into Salesforce CPQ system.
• Support mid-size to large size Business Unit in Pricing Strategy and Contract reviews.
• Develop and prepare complex pricing proposals in response to customer requirements.
• Create and own tracking system for all financial exceptions in customer contracts.
• Collaborate closely with Inside/Outside Sales, Finance, Legal, and Product Development teams.
• Own monthly, quarterly, and ad hoc management reporting and supporting analysis and insight by providing support to FP&A Team.
• Promote and ensure compliance with of company’s standard pricing processes.
• Maintain compliance with Inovalon’s policies, procedures and mission statement.
• Adhere to all confidentiality and HIPAA requirements as outlined within Inovalon’s Operating Policies and Procedures in all ways and at all times with respect to any aspect of the data handled or services rendered in the undertaking of the position.
• Fulfill those responsibilities and/or duties that may be reasonably provided by Inovalon for the purpose of achieving operational and financial success of the Employer.

Job Requirements:

• 8+ years of experience in pricing, finance, sales operations, business management, technology or relevant experience.
• Ability to meet deadlines and work under pressure on multiple concurrent projects.
• Excellent analytical skills and the ability to extrapolate data, interpret, and create course of action; strong Excel skills, particularly the ability to build and enhance models.
• Experience with business technologies especially Salesforce.com;
• Strong project management skills and experience.
• Ability to keep track of timelines and deliverables work under firm deadlines within a rapidly changing environment involving multiple projects and initiatives.
• Excellent verbal, presentation and written communication skills.
• Experience with Configure-Price-Quote technology a plus.

Education:

• Associate’s Degree in relevant field, Bachelor’s Degree preferred.

Physical Demands and Work Environment:

• Sedentary work ( i.e. sitting for long periods of time).
• Exerting up to 10 pounds of force occasionally and/or negligible amount of force.
• Frequently or constantly to lift, carry push, pull or otherwise move objects and repetitive motions.
• Subject to inside environmental conditions.
• Travel for this position will include less than 5% locally usually for training purposes.

Overview:  The Principal Pricing Analyst will be responsible for enhancing and improving the pricing process and models to align with the Company’s pricing strategy. Focused on the Provider Business Unit software products. 

Duties and Responsibilities:

• Enhance the pricing process to more closely align with the Company’s pricing strategy.
• Improve pricing models to better leverage existing internal market and product intelligence, enhancing the accuracy of pricing and better articulating the value proposition of the company’s product offerings.
• Assume hands-on role in transitioning and maintaining excel pricing models into Salesforce CPQ system.
• Support mid-size to large size Business Unit in Pricing Strategy and Contract reviews.
• Develop and prepare complex pricing proposals in response to customer requirements.
• Create and own tracking system for all financial exceptions in customer contracts.
• Collaborate closely with Inside/Outside Sales, Finance, Legal, and Product Development teams.
• Own monthly, quarterly, and ad hoc management reporting and supporting analysis and insight by providing support to FP&A Team.
• Promote and ensure compliance with of company’s standard pricing processes.
• Maintain compliance with Inovalon’s policies, procedures and mission statement.
• Adhere to all confidentiality and HIPAA requirements as outlined within Inovalon’s Operating Policies and Procedures in all ways and at all times with respect to any aspect of the data handled or services rendered in the undertaking of the position.
• Fulfill those responsibilities and/or duties that may be reasonably provided by Inovalon for the purpose of achieving operational and financial success of the Employer.

Job Requirements:

• 8+ years of experience in pricing, finance, sales operations, business management, technology or relevant experience.
• Ability to meet deadlines and work under pressure on multiple concurrent projects.
• Excellent analytical skills and the ability to extrapolate data, interpret, and create course of action; strong Excel skills, particularly the ability to build and enhance models.
• Experience with business technologies especially Salesforce.com;
• Strong project management skills and experience.
• Ability to keep track of timelines and deliverables work under firm deadlines within a rapidly changing environment involving multiple projects and initiatives.
• Excellent verbal, presentation and written communication skills.
• Experience with Configure-Price-Quote technology a plus.

Education:

• Associate’s Degree in relevant field, Bachelor’s Degree preferred.

Physical Demands and Work Environment:

• Sedentary work ( i.e. sitting for long periods of time).
• Exerting up to 10 pounds of force occasionally and/or negligible amount of force.
• Frequently or constantly to lift, carry push, pull or otherwise move objects and repetitive motions.
• Subject to inside environmental conditions.
• Travel for this position will include less than 5% locally usually for training purposes.

Join our team at Core One! Our mission is to be at the forefront of devising analytical, operational and technical solutions to our Nation's most complex national security challenges. In order to achieve our mission, Core One values people first! We are committed to recruiting, nurturing, and retaining top talent! We offer a competitive total compensation package that sets us apart from our competition. Core One is a team-oriented, dynamic, and growing company that values exceptional performance!

*This position requires an active TS/SCI with polygraph eligibility. * 

Responsibilities:

The Senior Target Materials (TM) Analyst conducts precise target coordinate mensuration, collateral damage estimation (CDE), and imagery analysis to support kinetic targeting operations across a Combatant Command (CCMD)  area of responsibility. This role produces geospatial and imagery-based target materials, performs weaponeering and battle damage assessments, and ensures compliance with DoD and CJCS standards. The analyst leverages NGA-certified tools and methodologies, including DCiDE, DIEE, and CGS, and must hold relevant certifications such as TMP, Basic CDE, or PPM, while adhering strictly to information security protocols.

Requirements:

• Conducts target coordinate mensuration production using direct, registration, multiple image geo-positioning and resection techniques on a variety of target types using National Geospatial-Intelligence Agency (NGA)-validated mensuration tools to support employment of kinetic weapons.
• Conducts analytic production of collateral damage estimates (CDE) and produces required graphics using Digital Point Position Strike Suite Collateral Damage Estimation (DCiDE) / Digital Imagery Exploitation Engine (DIEE). Conducts imagery research, analysis and exploitation and produces imagery-based target materials and other products to support targeting.
• Assists weaponeering using approved tools and / or guides to achieve desired damage criteria.
• Assists with no-strike identifications and nominations.
• Performs quality control, database nominations, creates and updates database records, and uploads TM products to databases. Submits collection requests as required to meet target material requirements to support current operations. Conducts Precise Point Mensuration (PPM) production conducting target coordinate mensuration using direct, registration (controlled tie), resection (uncontrolled tie), and multiple image geo-positioning techniques on a variety of target types using NGA validated mensuration tools to support employment of Global Positioning System (GPS) guided munitions.
• Perform Quality Control of target material products produced by other personnel. Conduct weaponeering to achieve desired damage criteria utilizing Joint Munitions Effectiveness Manuel Weaponeering System or other approved tools. Experience (All Levels): Demonstrates experience with Target Coordinate Mensuration (TCM), Modernized Integrated Database (MIDB), and Google Earth. Proficient with Socket Community Gold Standard (CGS), Joint Weaponeering System (JWS), DCiDE / DIEE, and Joint Targeting Toolbox.
• Education required: NGA, CCMD, or Service Target Materials Production (TMP) certification. Must be certified in Basic CDE Methodology or certified in PPM by NGA or an NGA-accredited Service Component. Desired education: education / training includes successful completion of in- resident Joint Targeting course, or the Geospatial Imagery / Targeting Analyst course, or the Air Operation Center Course.
• Desired Experience: Minimum 12 years of experience related to the specific labor category with at least a portion of the experience within the last 2 years.
• Desired Education: Master’s degree in an area related to the labor category from a college or university accredited by an agency recognized by the U.S. Department of Education; or have Bachelor’s degree related to the labor category from a college or university accredited by an agency recognized by the U.S. Department of Education and an additional 5 years of related senior experience, for a total of 17 years, as a substitute to the Master’s degree.
• Conduct focused, tailored targeting materials analysis to support targeting efforts across the CCMD AOR. 
• Produce imagery and/or geospatial based target materials adhering to DoD policy, CJCS Manuals/Instructions, and CCMD policies/standards for target material production. 
• Perform targeting analysis to accomplish battle damage assessment (BDA), produce BDA products, and assist with combat assessment. 
• Conduct and assist with weaponeering solutions. 
• Conduct Collateral Damage Estimates and produce required graphics. 
• Submit collection requests to satisfy target material requirements. 
• Conduct hard and deeply buried target analysis and prepare related products. 
• Provide recommended input to DoD and CJCS Manuals/Instructions, CCMD/policies/SOPs, and standards for Target Materials production. 
• Adheres to strict security protocols to safeguard classified information and ensure information security.

Demonstrates experience with Target Coordinate Mensuration (TCM), Modernized Integrated Database (MIDB), and Google Earth. Proficient with Socket Community Gold Standard (CGS), Joint Weaponeering System (JWS), DCiDE / DIEE, and Joint Targeting Toolbox. Required to have NGA, CCMD, or Service Target Materials Production (TMP) certification. Must be certified in Basic CDE Methodology or certified in PPM by NGA or an NGA-accredited Service Component.

Core One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

__PRESENT