Summary:
We are seeking a skilled Network Analyst who is responsible for designing, installing, and troubleshooting network systems, including wireless, to meet our business objectives. This role involves configuring and maintaining both physical and logical network components and working on network architecture design, LAN/WAN/wireless solutions, and capacity planning.

Responsibilities:

• Design, install, and troubleshoot network systems to support business functions.
• Configure and maintain physical and logical network components.
• Assist in the design of network architecture and infrastructure.
• Plan and design LAN/WAN/wireless solutions.
• Perform capacity and resource planning, assess network risks, and develop contingency plans.
• Implement and maintain network management software.
• Research, analyze, and implement software patches or hardware changes to address network deficiencies.
• Provide Tier 2 support for network-related issues.
• Evaluate new products and services and manage vendor service level agreements.
• Contribute to medium to high complexity projects and occasionally lead projects or coach junior staff.

Required Skills:

• Bachelor’s Degree in Computer Science, Information Systems, or a related field, or equivalent work experience.
• Minimum of 3 years of IT work experience in infrastructure/network environments focusing on network design, implementation, administration, and support.
• Experience with medium to high complexity network projects.
• Strong understanding of network design, LAN/WAN solutions, and wireless technologies.
• Ability to work effectively as a team member and occasionally as a project leader.
• Excellent problem-solving and troubleshooting skills.
• Proficiency in capacity planning and risk assessment for network systems.

#Ll-Onsite

Incident Response Analyst

Location: Hybrid,Tampa, FL / Remote 

While proximity to Tampa is preferred to support a hybrid schedule in our Tampa Center of Excellence, we’re open to remote candidates who can support the Eastern Time Zone.

Reporting  to the Manager of Adversary Response, the Incident Response Analyst operates on the front lines of active cyber conflict—defending organizations against sophisticated, real-world adversaries. This is a mission-critical role for practitioners who thrive in high-pressure environments and are driven to outpace, outthink, and disrupt advanced threat actors.
As a primary responder during live incident engagements, you will lead hands-on investigations into complex intrusions, leveraging advanced EDR and detection platforms to trace attacker behavior, contain threats in real time, and eradicate adversary presence at its source.
This role demands sharp analytical instincts, technical depth, and a relentless curiosity—paired with the discipline to execute under pressure. You won’t just respond to incidents; you’ll play a key role in defending critical environments, strengthening resilience, and raising the bar against an ever-evolving threat landscape.

In this role, you’ll get to:

• Lead end-to-end incident response engagements within customer environments, driving rapid investigation, containment, and remediation of active threats
• Conduct deep-dive forensic and malware analysis to uncover adversary tactics, techniques, and procedures (TTPs), translating findings into actionable intelligence
• Proactively hunt for advanced threats through hypothesis-driven threat hunting across diverse data sources and telemetry
• Triage and validate suspicious activity using a combination of open-source intelligence (OSINT), proprietary intelligence, and behavioral analysis
• Own the documentation of incidents, ensuring clear, defensible reporting and timeline reconstruction within case management systems
• Identify and operationalize new adversary techniques, tools, and tradecraft—scaling knowledge across the team to strengthen collective defense
• Maintain a constant pulse on the evolving threat landscape, applying emerging intelligence to real-world investigations
• Surface visibility gaps in logging, telemetry, and detection coverage, and partner with stakeholders to enhance overall security posture
• Collaborate cross-functionally to develop and refine detection content, response playbooks, and threat intelligence outputs
• Serve as a trusted advisor to customers, confidently guiding them through the full incident response lifecycle—from initial compromise to full remediation and recovery

• Proven, hands-on experience leading incident response investigations, with the ability to independently scope, analyze, and drive complex engagements to resolution
• A track record of operating in high-volume, high-complexity environments (e.g., MDR, MSSP, consulting, or enterprise IR teams), with exposure to a wide range of real-world incidents and adversary scenarios
• Deep expertise with Endpoint Detection & Response (EDR) platforms such as SentinelOne, Microsoft Defender, and CrowdStrike, including advanced querying, triage, and response actions
• Strong command of incident response methodologies and frameworks (e.g., NIST, PICERL), with the ability to apply them dynamically in fast-moving, ambiguous situations
• Experience leveraging SIEM, SOAR, case management, and threat intelligence platforms to investigate, correlate, and respond to threats at scale
• A solid understanding of attacker methodologies, including common and emerging tactics, techniques, and procedures (TTPs), with the ability to map activity to frameworks such as MITRE ATT&CK
• Exceptional communication skills, with experience presenting technical findings and strategic recommendations to both technical teams and executive stakeholders
• The ability to operate as a trusted advisor during high-pressure incidents—bringing clarity, structure, and confidence to customer engagements

Note: This role is best suited for practitioners who have been deeply immersed in live incident response environments and have built pattern recognition across numerous engagements. Candidates with limited exposure to real-world incidents may find the pace, ambiguity, and complexity of this role challenging.

Statutory Pay Disclosure 

The anticipated salary range for this role is $127,00 - $140,000 + stock options + benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States; 
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.

Summary: We are seeking a skilled Web Security Analyst to develop and manage web security policies and procedures for our enterprise. This role involves evaluating security solutions for Inter/Intranet/Extranet environments and ensuring compliance with security policies and standards for e-commerce applications.

Responsibilities:

• Assist in the development and management of web security policies and procedures.
• Evaluate and recommend information security solutions for Inter/Intranet/Extranet environments.
• Monitor, assess, and review rule bases and configurations for firewalls and intrusion detection systems.
• Conduct security assessment reviews of e-commerce applications for compliance.
• Review software products and recommend security solutions for various platforms.
• Educate users on web security standards and practices.
• Prepare and review status reports on security matters to develop risk analysis scenarios and response procedures.
• Ensure compliance with security policies by administering and monitoring security profiles.
• Investigate potential security violations and update security controls as needed.

Required Skills:

• Bachelor's Degree in Computer Science, Information Systems, or a related field, or equivalent work experience.
• Minimum of 3 years of combined IT and security experience with exposure to infrastructure/Web and multi-platform environments.
• Strong understanding of client/server and web technologies.
• Knowledge of security issues, techniques, and implications across various computer platforms.
• Experience developing security solutions for medium to high-complexity assignments.
• Ability to work on multiple projects and lead web-related security components.
• Capability to coach junior technical staff.

#Ll:Onsite

Summary: Join our team as an IT Security Manager, where you will develop and manage security across multiple IT functional areas, such as data, systems, network, and Web operations. In this role, you will assist in creating and implementing security policies and procedures, prepare status reports, and respond to security breaches. Your expertise will help enhance our enterprise's security through education, consultation, and direct support.

Responsibilities:

• Develop and manage security for various IT functional areas across the enterprise.
• Assist in creating and implementing security policies and procedures.
• Prepare status reports on security matters and develop risk analysis scenarios.
• Track and monitor software viruses and enforce security policies.
• Administer and monitor security profiles and review violation reports.
• Evaluate products and procedures to enhance productivity and effectiveness.
• Provide direct support and consultation to IT staff and business on security-related issues.
• Represent organizational security needs by providing expertise in IT projects.

Required Skills:

• Bachelor’s Degree in Computer Science, Information Systems, or a related field, or equivalent work experience.
• A minimum of 4 years of combined IT and security work experience with broad exposure to systems analysis, applications development, and database design and administration.
• At least 1-2 years of experience in information security.
• Extensive knowledge of networking, databases, systems, and Web operations.
• Proficiency in security issues, techniques, and implications across various computer platforms.
• Ability to work independently or as part of a project team on complex security issues.
• Strong problem-solving skills and the ability to coach junior staff.

#Ll-Onsite

Security Analyst II (Weekday Afternoons)

Hybrid, Tampa, FL

• Training schedule: (first 45 to 60 days)
  -Monday and Friday (Remote) - 9AM to 5PM
  -Tuesday, Wednesday & Thursday in the office - 9AM to 5PM
• Upon completion of training:
  - Monday and Friday (Remote) - 2PM-10PM
  - Tuesday, Wednesday and Thursday in the office - 2PM-10PM

Deepwatch is looking for a highly motivated, self-driven, technical analyst dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. The Deepwatch Security Operations Center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real-time for our customers. 

The Deepwatch Security Operations Center is a unique approach to how we support our customers and ultimately provide an experience not found anywhere else. You’ll be an integral part of supporting our customers by understanding their bespoke environment, needs and challenges. You will be playing a key role in supporting some of the top organizations in the world, and have the opportunity to develop your skills by working with the best responders in the industry, your team and your shift !

In this role, you’ll get to:

• Support incident handling processes across multiple platforms and security technologies including Windows, Linux and macOS
• Provide in depth analysis from escalated requests originating from Security Analyst 1
• Validate suspicious events by performing investigations using SIEM and SOAR technologies, leveraging Deepwatch proprietary tooling, intelligence and OSINT, TTPs and IOCs
• Identify gaps in customer environments, data ingested or configuration errors which reduce telemetry quality
• Work with customer and leadership to surface and resolve concerns
• Provide support to Security Analyst I including coaching and training as necessary
• Leverage your knowledge of Alert Triage, SOC Operations, and Defense in Depth (DiD) to contribute to projects for overall customer success
• Produce high-quality written and verbal communications, recommendations, and findings to customer management in a timely manner
• Surface opportunities for improvement in the SOC and for the customer and be a change agent for measurably improving our customer security posture and experience
• Continue to sharpen your skills and capabilities on the job, and through the Deepwatch development program

To be successful in this role you’ll need to:

• Experience as an analyst in Security Operations Center; MSSP environment preferred
• Have a strong understanding of cyber security principles, concepts and practices including the ability to perform a complete and thorough incident investigation and triage with limited support 
• Know your way around SIEM platforms (Splunk required, Google SecOps or Microsoft Sentinel preferred), how to perform queries and leverage various log sources to perform investigations
• Competency with in-depth header analysis, hashes and Windows/macOS/Linux logs
• Demonstrate the ability to pivot to other log sources, cloud systems or consoles to perform a comprehensive analysis from multiple data sources
• Have a basic understanding of modern EDR, email security and cloud identity platforms
• A desire to support others and uplift the program and team through updating training materials and SOPs
• Strong written and verbal communication skills including the ability to compose detailed reports and analysis that’s thorough, accurate and complete
• Experience with ticketing systems, ServiceNow preferred
• Sec+, CySA, CEH, GSEC, or equivalent certification preferred

Statutory Pay Disclosure:

The anticipated salary range for this role is $77,500 - $97,000 + stock options + benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States; 
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.