Staff Threat Intelligence Analyst

Huntress

23h•$190,000 - $210,000•Remote

About The Position

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.

Requirements

Minimum of 5 years of experience in the field of Threat Intelligence
Experience with SIEM tools for scaled log analysis
Familiarity with detection engineering, detection logic, i.e., Sigma Rules
Experience researching and scoping threat hunt missions
Understanding of cybersecurity, threat actors, and end-to-end threat life cycle, including one or more of the following: digital forensics, malware research, incident response, vulnerabilities, and exploits
Experience with 3rd-party intelligence tools, feeds, and reputation services.
Experience conducting OSINT gathering and analysis

Nice To Haves

Foundational development experience across multiple platforms (e.g., Windows and/or macOS), C/C++, GoLang, and Python
Proficient knowledge of Windows and/or macOS subsystems and how they interact both at the user and kernel level

Responsibilities

Conducts research on emerging adversary tradecraft in the identity space (Microsoft 365, Google) to help scope and conduct hunt missions
Responsible for aggregating threat data to build out reports for customers to show Huntress’ value, and inform them of various threats that have been seen and reported
Responsible for creating reports for marketing to show Huntress’ value to the larger community
Promote Huntress’ reputation through media interaction, public speaking, and blogs
Works with the Sr. Director of Adversary Tactics, the Security Operations Center, Product, and others to develop the Product and threat operations roadmap
Provides technical leadership for some members of the Security teams
Supports the professional development of researchers and others in the organization through coaching and mentorship
Responsible for enhancing Huntress visibility by ingesting and utilizing IOCs from external threat intel sources
Responsible for blog posts and other marketing materials regarding threat trends
Excellent written and verbal communication skills
Familiarity with utilizing AI in workflows