Jobs Referso Partner API

Free job alerts

XQL jobs

Job titleLocation

Popular:United States Canada Viet Nam

All filtersRefine by skill, company, date, job type, industry and more

Company

Skillsjobs that use all of them

XQL

Popular

Date posted

Any timePast hourPast 24 hoursPast week

Workplace

RemoteHybridOn-site

Job type

Full-timePart-timeContractInternshipTemporary

Experienceyears required

0–2 years2–5 years5–10 years10+ years

Salary

Salary listed

Education

High schoolAssociate degreeBachelor's degreeProfessional certificatePostgraduate degree

Industryfield of work

Software & InternetHardware & ElectronicsEngineeringHealthcareLife Sciences & ResearchFinance & AccountingSales & Business DevelopmentMarketing & CommunicationsCreative & DesignCustomer Service & SupportAdministrative & OfficeHuman Resources & RecruitingLegal & ComplianceManagement & OperationsEducation & TrainingRetailHospitality & Food ServiceManufacturing & ProductionSkilled Trades & ConstructionTransportation & LogisticsFacilities, Cleaning & SecuritySocial Services & Public SectorEnergy, Environment & Agriculture

1 selected

Skill:XQL

Referso Jobs

Fresh jobs from employer career sites in the US and Europe. Search free, get alerts free, and let Referso apply when you're ready.

Job seekersSearch jobs Free job alerts Remote jobs Jobs by location Jobs by skill

RefersoAuto-apply How it works Pricing Log in

For companiesPartner API (beta)API docs Contact sales

CompanyAbout Contact Privacy Terms

© 2026 Referso. Jobs link to the original posting; Referso is not affiliated with the employers listed.Privacy Terms Request a removal

1–2 jobs· newest first

SOC Analyst MidNew
Pyramid Consulting, Inc · Irving, US
$40–$50On-site · Contract · Mid
Senior Technical Consultant - Network SecOpsNew
AHEAD · US
Senior

+10K new in the last hour

P

SOC Analyst Mid

Pyramid Consulting, Inc · Posted Nov 12, 2026

Irving, Texas, United States
On-site
Contract · Mid
$40–$50 per hour
3–5 years

Apply with RefersoAI Apply on careers page

Investigate escalated alerts and incidents, validating triage decisions and taking ownership of escalated alerts.

Compensation

$40 - $50/hour.

Responsibilities

Investigate escalated alerts and incidents, validating triage decisions and taking ownership of escalated alerts
Perform in-depth investigations across endpoint, network, identity, email, and cloud telemetry to determine root cause, scope, and impact
Lead containment, eradication, and recovery for medium- and high-severity incidents, coordinating with IT teams to execute remediation actions
Develop new detection rules and correlation searches, tuning detections based on alert metrics and historical data
Mentor Level 1 analysts, providing feedback on investigation practices and contributing to the creation of SOPs and playbooks

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent experience

Skills

SIEM EDR SPL Windows Linux Active Directory TCP/IP DNS HTTP/S SMTP MITRE ATT&CK PowerShell Python XQL CompTIA CySA GIAC GCIH GIAC GCIA Cortex XSOAR AWS Azure Microsoft 365

Benefits

health insurance (medical, dental, vision)
401(k) plan
paid sick leave

See full job description

Senior Technical Consultant - Network SecOps

AHEAD · Posted Nov 12, 2026

United States
Senior
8+ years

Apply with RefersoAI Apply on careers page

The Senior Technical Consultant is a cybersecurity professional with deep expertise across SIEM and SOAR platforms who supports Enterprise Clients.

Responsibilities

Design and deploy SIEM architectures across on-premises, virtual, and cloud environments, including data ingestion strategy for log forwarders, syslog collectors, and cloud-native telemetry in AWS, Azure, and GCP
Configure and design data pipelines and storage tiers for retention, query performance, and compliance requirements, including sizing decisions for high-volume log environments
Create custom correlation rules and detection content (Cortex XSIAM BIOC/correlation rules, CrowdStrike NG-SIEM correlation rules, Google SecOps YARA-L rules) tailored to client environments, moving beyond out-of-box use cases to address specific threats and false-positive patterns
Develop custom dashboards and SOAR playbooks using metrics, entities, and application views, translating raw log data into views that map to client SOC workflows and executive reporting needs
Build and maintain REST API integrations between SIEM/SOAR and EDR (including CrowdStrike Falcon and Cortex XDR), firewall, ticketing, and CMDB platforms, including custom automation scripts and data enrichment configurations

Requirements

Nice to have: CEH
Nice to have: PenTest+
Nice to have: Security+
Nice to have: CISSP
Nice to have: Microsoft SC-200

Skills

SIEM SOAR Palo Alto Cortex XSIAM XSOAR CrowdStrike Falcon Next-Gen SIEM Falcon Fusion SOAR Google SecOps AWS CloudTrail Azure Monitor GCP Audit Logs Python PowerShell XQL LogScale/CQL YARA-L SPL KQL MITRE ATT&CK framework Cyber Kill Chain NIST Cybersecurity Framework (CSF)CIS Critical Security Controls Splunk Microsoft Sentinel IBM QRadar Elastic Security Swimlane Tines

Benefits

Medical, Dental, and Vision Insurance
401(k)
Paid company holidays
Paid time off
Paid parental and caregiver leave

See full job description