Managed detection and response with NSA-rooted incident response expertise
Soteria is a 11–50-person security advisory and managed detection firm founded in 2014 by ex-NSA operators. The stack—AWS, GCP, Azure, SIEM, syslog—reflects a multi-cloud monitoring posture typical of managed services, but hiring velocity is accelerating across security (4 open roles) and education (3 roles), suggesting a shift toward scaling both delivery and knowledge transfer. Pain points around telemetry ingestion and log normalization indicate the team is building proprietary data pipelines rather than relying purely on vendor turnkey solutions.
Soteria provides managed detection and response (MDR), incident response, forensics, penetration testing, threat hunting, and security assessments to mid-market and enterprise clients. The firm was founded by former NSA personnel and veterans from financial services, transportation, manufacturing, and technology sectors, bringing vertical-specific threat and compliance knowledge to engagements. Rather than treating security as a checklist, the team diagnoses business-critical weaknesses and pairs remediation advice with operational feasibility. Based in Charleston, South Carolina, Soteria operates across US hiring markets.
AWS, Google Cloud Platform, and Microsoft Azure. The multi-cloud stack supports detection across diverse client environments and infrastructure.
Managed detection and response, incident response, forensics, penetration testing, threat hunting, security assessments, compliance auditing, and custom capability development—grounded in NSA-level operational expertise.
Other companies in the same industry, closest in size