Cybersecurity Watch Analyst
Remote
Onebrief makes military planning seamless and represents a shift in paradigm for future military decisions. It is an all-in-one tool that supports both the creative and process-oriented aspects of military planning. In Onebrief, planners use maps, boards, diagrams, timelines, slides and written products to create their plans—all while sharing a common database. Everything stays in sync, in real time. Our approach has been refined and validated through hundreds of user experiments.
Our product is currently in broad use at 8 of the largest military headquarters in the world. 3 of the 4 biggest operational plans in the US are currently built with Onebrief. Last year, we achieved 100% gross retention and 158% net retention—our revenue grew 4x and reached double-digit millions. We are backed by Y Combinator (S21) and top-tier VCs, including Caffeinated Capital (Affirm, Docker, Notion, and more) and Human Capital (Anduril, Brex, Snowflake, and more), and have raised a total of $53M in venture capital. Our elite team combines the best of tech and military talent, including education and experience at Google, Twitter, Adobe, MIT, Harvard, Special Operations, TOPGUN, and more.
What you will achieveYou will hit the ground running, applying your experience with Cloud SIEM applications to ensure that Onebrief is compliant with CMMC 2.0/NIST 800-171 and FedRAMP High/NIST 800-53 security auditing, logging, and monitoring requirements. In addition to configuring data ingestion, dashboards, and alerts, you will work with our Compliance Specialists and Cybersecurity Engineer to ensure that all logging and monitoring evidence is properly documented in our GRC platform. You will also analyze logs and be a member of the Incident Response team.
About YouThis is an opportunity for candidates who are located in DC, Tampa, Hawaii, or San Diego, and have or can obtain a TS clearance with SCI eligibility. You will primarily work remotely, but will, at times, be called upon to support our operations on-site.
The ideal candidate will have experience working with Splunk Cloud Platform, Elastic Cloud, or another well-known cloud SIEM. Risk Management Frameworks, such as NIST or ISO, have guided your work in the past.
Core skills: In-depth understanding of log analysis and continuous monitoring principles, configuring and filtering data ingestion, creating dashboards and alerts, and incident response
Qualifications
5+ years in Cybersecurity Analysis or related roles
Ability to obtain TS clearance with SCI eligibility
Confidence that they can obtain one of the following certificates within three months: CySA+,CBROPS, CFR, FITSP-O, GCIA, GDSA, GICSP, or GCFA
Must-Have Skills and Qualifications:
Bachelor of Science in Computer Science, Cybersecurity, Information Technology, or related field OR additional 4 years of SIEM experience
Onebrief makes military planning seamless and represents a shift in paradigm for future military decisions. It is an all-in-one tool that supports both the creative and process-oriented aspects of military planning. In Onebrief, planners use maps, boards, diagrams, timelines, slides and written products to create their plans—all while sharing a common database. Everything stays in sync, in real time. Our approach has been refined and validated through hundreds of user experiments.
Our product is currently in broad use at 8 of the largest military headquarters in the world. 3 of the 4 biggest operational plans in the US are currently built with Onebrief. Last year, we achieved 100% gross retention and 158% net retention—our revenue grew 4x and reached double-digit millions. We are backed by Y Combinator (S21) and top-tier VCs, including Caffeinated Capital (Affirm, Docker, Notion, and more) and Human Capital (Anduril, Brex, Snowflake, and more), and have raised a total of $53M in venture capital. Our elite team combines the best of tech and military talent, including education and experience at Google, Twitter, Adobe, MIT, Harvard, Special Operations, TOPGUN, and more.
What's in it for youEquity: Share in the company's success.
Flexible Work Environment: Remote work with flexible hours and unlimited PTO.
Comprehensive Health Coverage: Health, dental, vision, and life insurance.
Retirement Plan: 401(k) plan to secure your future.
Parental Leave: Support for your growing family.
Company Retreats: Annual company summit trips.
Home Office Budget: $1,000 per year for home office improvements.
Job Profile
Must be able to obtain TS clearance with SCI eligibility On-site support may be required
Benefits/PerksOpportunity for growth Remote work Supportive team environment
Tasks- Analyze logs and support incident response
- Configure data ingestion and dashboards
- Ensure compliance with CMMC 2.0/NIST 800-171
Cloud siem Continuous Monitoring Cybersecurity Dashboards Data ingestion Docker Elastic Cloud Incident Response ISO Log Analysis Military planning NIST Risk Management Security Splunk
Experience5 years
EducationBachelor of Science Computer Science Related Field
CertificationsCBROPS CFR CySA+ FITSP-O Gcfa GCIA GDSA GICSP Sci eligibility
TimezonesAmerica/Anchorage America/Chicago America/Denver America/Los_Angeles America/New_York Pacific/Honolulu UTC-10 UTC-5 UTC-6 UTC-7 UTC-8 UTC-9