Full-Time

SIEM Support

Zta

Posted on 7/28/2025

NexThreat

NexThreat

1-10 employees

Deployed detection analytics for Fortune 50

No salary listed

No H1B Sponsorship

Washington, DC, USA

Hybrid

Hybrid position requiring attendance at scheduled and unscheduled in-person meetings.

US Citizenship Required

Category
IT & Security (1)
Required Skills
Microsoft Azure
ServiceNow
Requirements
  • Bachelor’s degree in Cybersecurity, Cybersecurity Operations, Information Technology, or a related field (or equivalent experience)
  • At least 3 years of working knowledge supporting SIEM platforms, especially Microsoft Sentinel and NetWitness in a government or enterprise environment
  • Strong understanding of security information and event management, threat detection, incident response processes, and modern cybersecurity practices
  • Familiarity with cloud security platforms (Azure, Zscaler, Cloudflare) and vulnerability management tools
  • Ability to support complex security environments and work effectively with diverse security tools and teams
Responsibilities
  • Support the deployment, configuration, operation, and maintenance of SIEM platforms, including Microsoft Sentinel and NetWitness
  • Conduct continuous monitoring, threat detection, and incident response activities using SIEM data
  • Support SIEM upgrade activities, rule tuning, and troubleshooting of alerts and detections
  • Operate, maintain, and upgrade associated security tools, including but not limited to Microsoft Azure, Microsoft Defender for Endpoint (DfE), Xacta 360/IO, Zscaler, FedRamp compliance tools, Cloudflare, Tenable IO, Nexpose, Armis, Trellix HX/CM, ServiceNow
  • Ensure all tools are integrated effectively within the cybersecurity ecosystem
  • Assist in developing, maintaining, and maturing the GPO’s Zero Trust Architecture
  • Develop strategies to assess current cybersecurity posture and implement improvements aligned with EO 14028
Desired Qualifications
  • Certifications such as GIAC GCIH, GIAC GCED, CISSP, CompTIA CySA+, or Microsoft Defender certifications are preferred

NexThreat provides security detection analytics to help large organizations identify and respond to digital threats. The company’s products work by deploying specific detection methods across a client's infrastructure to monitor data and flag suspicious activity. Unlike many consulting firms, NexThreat distinguishes itself through the scale of its deployments, serving a high volume of Fortune 50 companies, military branches, and government agencies. Its goal is to secure complex environments by providing proven analytical tools that protect critical data and systems.

Company Size

1-10

Company Stage

N/A

Total Funding

N/A

Headquarters

Reston, Virginia

Founded

2016

Simplify Jobs

Simplify's Take

What believers are saying

  • MelkoTech acquisition on January 2, 2024, adds cybersecurity staffing expertise.
  • CEO Ruben Gavilan notes enhanced machine learning via talent integration.
  • HUBZone internships build compliant talent pipeline for government clients.

What critics are saying

  • MelkoTech integration fails from cultural clashes, causing recruiter attrition in 12-24 months.
  • Lockheed Martin poaches 3-5 key engineers, eroding detection moat in 12-18 months.
  • Booz Allen acquires NexThreat, ending independence in 18-36 months.

What makes NexThreat unique

  • NexThreat leads in detection analytics deployed across Fortune 50, military, and agencies.
  • Certified 8a, SDVOSB, and HUBZone for federal contracting advantages.
  • Specializes in AI-driven threat detection and compliance automation.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

Dental Insurance

Vision Insurance

401(k) Retirement Plan

401(k) Company Match

Life Insurance

Short-Term and Long-Term Disability Insurance

Flexible Spending Account/Flexible Spending Account

Profit Sharing

Employee Referral Bonus

Company News

NexThreat
Feb 2nd, 2024
NexThreat Acquires MelkoTech

NexThreat acquires MelkoTech.

INACTIVE