Security Operations Analyst

About Huntress

Founded in 2015 by former NSA cyber operators, Huntress operates as a remote-first cybersecurity team dedicated to making enterprise-grade security solutions accessible to businesses of all sizes. Supporting over 5 million endpoints and 14 million identities globally, Huntress combines proprietary technology with a 24/7 expert-led Security Operations Center (SOC) to provide robust protection for complex environments.

Position Summary

We are seeking a Security Operations Center Analyst who will be instrumental in identifying, investigating, responding to, and mitigating cybersecurity threats daily. The role offers opportunities to enhance analytical skills and advance career growth while working alongside passionate professionals committed to shielding organizations worldwide from cyber-attacks.

Key Responsibilities

• Analyze and respond to alerts generated by the Huntress platform.
• Conduct detailed examinations of endpoint detection and response telemetry, logs, and forensic artifacts to understand attack origins and deliver effective remediation strategies.
• Perform tactical malware analyses as part of alert investigations.
• Investigate suspicious activities within Microsoft M365 environments and provide necessary remediation.
• Support escalations from the Product Support team relating to threat and SOC inquiries.
• Participate in creating and refining detection engineering processes.
• Engage in projects aimed at improving outcomes for analysts and partners.
• Collaborate within a mentored team environment, promoting knowledge sharing and mutual improvement.

Required Qualifications and Experience

• At least two years’ experience in a Security Operations Center or Digital Forensics (DFIR) role.
• Proven expertise with Windows, Linux, and MacOS platforms as attack surfaces.
• Working knowledge of basic threat actor tools and techniques, including the MITRE ATT&CK framework, command line operations, scheduled tasks, service control manager, enumeration and lateral movement strategies, persistence and defense evasion techniques.
• Familiarity with static and dynamic malware analysis principles.
• Understanding of Windows or Enterprise Domain Administration, including Active Directory, Group Policy, and Domain Trusts.
• Strong grasp of networking fundamentals such as ports, protocols, NAT, IP addressing, and VLANs.
• Comprehension of web technologies and security concepts, including web servers and the OWASP Top 10.
• Excellent communication skills to articulate complex cybersecurity events to non-technical stakeholders and collaborate effectively across teams.
• Customer-oriented mindset with dedication to prioritizing client concerns and needs.
• Curiosity and enthusiasm for continuous learning and professional development.

Preferred Skills

• Previous experience working within MSP/MSSP/MDR environments.
• Advanced investigative skills on Linux and MacOS systems.
• Proficiency in scripting languages like PowerShell, Python, Bash, PHP, JavaScript, or Ruby.
• Engagement with platforms such as HackTheBox, TryHackMe, or Blue Team Labs Online.
• Experience conducting cloud security investigations involving Microsoft 365, Azure, AWS, or GCP.
• Participation in cybersecurity competitions such as Capture the Flag or Collegiate Cyber Defense Competition.
• Familiarity with MSP tools including Remote Monitoring and Management (RMM) software.

Compensation and Benefits

• Competitive base salary ranging from €70,000 to €90,000, supplemented by bonuses and equity offerings.
• Fully remote work setting since the company's inception.
• Home office set-up reimbursement up to £398 for new hires.
• Generous personal leave allowances.
• Monthly digital expense reimbursement of £92.
• Opportunities for travel to the United States 1-2 times per year for company events.
• Company pension scheme participation.
• Access to the BetterUp platform for coaching and personal and professional growth.

Diversity and Inclusion Statement

Huntress fosters an inclusive workplace culture where every team member is valued and empowered to be their authentic self. The organization is an equal opportunity employer and explicitly prohibits discrimination based on legally protected statuses. The company maintains a firm stance against cybercriminals targeting businesses of any size.

Additional Information

If applicants require accommodations during the application, interview, or testing processes, they should contact the designated accommodations email. Note that only accommodation-related inquiries will be addressed. The recruitment process incorporates artificial intelligence tools to assist with application evaluation but retains human decision-making authority. Applicants acknowledge this practice upon submission.