The first 3 months are hybrid (2-3 days per week) at one of these offices: Dallas, San Antonio, or Austin, TX; Tempe, AZ; Las Vegas, NV; Portland, OR; Sacramento, CA; Garden Grove, CA; Philadelphia, PA; or Dulles, VA. Investigate and triage alerts from EDR, SIEM, email, identity, vulnerability, cloud, and endpoint tools, and escalate clearly when containment or a business decision is needed.