Security Operations Analyst - West Coast Shift

Huntress

5h•$100,000 - $125,000•Remote

About The Position

Huntress is hiring a Security Operations Center Analyst to investigate, respond to, and remediate a variety of cybersecurity intrusions. The analyst will triage alerts from the Huntress platform, review endpoint detection and response telemetry and other forensic evidence, investigate malware and suspicious Microsoft 365 activity, and recommend remediations. The role also contributes to detection engineering, support escalations, and projects that improve outcomes for analysts and partners. The Security Operations Center is a 24/7, human-led team. The position is remote in the United States on the West Coast. Initial training is Monday through Friday; afterward, schedules may change and may include weekends or a 4x10 shift depending on business requirements.

Requirements

At least 4 years of experience in a SOC or Digital Forensics (DFIR) role.
Demonstrated experience with Windows, Linux, and macOS as attack surfaces.
Experience with basic threat actor tools and techniques, including the MITRE ATT&CK Framework, PowerShell and Command Prompt, WMIC, Scheduled Tasks, SCM, Windows domain and host enumeration, basic lateral movement, persistence mechanisms, defense evasion, and other offensive or red-team TTPs.
Demonstrated experience with static and dynamic malware analysis concepts.
Working knowledge of Windows administration or enterprise domain administration, including Active Directory, Group Policy, and domain trusts.
Working knowledge of core networking concepts, including common ports and protocols, NAT, public and private IPs, and VLANs.
Working knowledge of web technologies and concepts, including web servers and applications and the OWASP Top 10.
Effective communication skills, including the ability to explain complex events to less technical audiences and collaborate across the SOC and other departments.
Commitment to prioritizing and addressing customer needs and concerns in decision-making.
Curiosity and genuine excitement for learning.

Nice To Haves

Previous experience in an MSP, MSSP, or MDR role.
Linux and macOS investigative experience.
Experience with scripting languages such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby.
Experience on platforms such as HackTheBox, TryHackMe, or Blue Team Labs Online.
Experience with cloud-based investigations, such as M365, Azure, AWS, or GCP.
Participation in cybersecurity competitions such as Capture the Flags or the Collegiate Cyber Defense Competition.
Familiarity with MSP tools such as RMMs.

Responsibilities

Triage, investigate, and respond to alerts from the Huntress platform.
Review EDR telemetry, log sources, and forensic artifacts to determine attack root causes where possible and recommend remediations.
Perform tactical malware analysis while investigating and triaging alerts.
Investigate suspicious Microsoft 365 activity and provide remediations.
Assist with threat-related and SOC-relevant escalations from the Product Support team.
Contribute to detection engineering creation and tuning.
Contribute to projects intended to improve outcomes for analysts and partners.
Contribute to a collaboratively mentored team.

Benefits

Generous paid time off, including vacation, sick time, and paid holidays.
12 weeks of paid parental leave.
Medical, dental, and vision benefits plans.
401(k) with a 5% company contribution regardless of employee contribution.
Life and disability insurance plans.
Stock options for all full-time employees.
One-time $500 reimbursement for building or upgrading a home office.
Annual allowance for education and professional development assistance.
$75 USD per month digital reimbursement.
Access to the BetterUp platform for coaching and personal and professional growth.
Potential eligibility for on-call or call-in pay in addition to base pay.
Bonus and equity in addition to base compensation.