Security Operations Analyst

This is a fully remote position, open to applicants in Australia.

📋 Description

• Manage, investigate, and respond to alerts generated by the Huntress platform, ensuring effective remediation.

• Analyze EDR/SIEM telemetry, log sources, and forensic artifacts to identify root causes of attacks and recommend remediation strategies.

• Conduct dynamic malware analysis to extract indicators of compromise and assess malicious intent.

• Develop and refine detection signals to counter emerging threats and enhance queue management.

• Investigate activities within Microsoft 365 and Google Workspace, providing remediation advice for compromised tenants.

• Enhance skills through practical experience with intrusion data, paid training opportunities, and the responsible application of AI tools in research and routine analysis.

• Assist with customer success by addressing customer and partner escalations related to threat issues and SOC queries.

• Collaborate with Product and Engineering teams to enhance Human Led Agentic workflows.

• Support sales initiatives and work with Product on the Huntress’ MDR service and platform.

• Engage in Incident Response, Security Operations, Threat Hunting, and Detection Engineering activities.

• Share findings through blogs, conference presentations, webinars, and research publications.

⛳️ Requirements

• Minimum of 2 years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles.

• Proven experience with at least one operating system: Windows, Linux, or macOS, focusing on attack surfaces, malware analysis, and fundamental tools and techniques used by threat actors.

• Knowledge of essential system administration skills and potential abuses by threat actors, including Active Directory, PowerShell, Group Policy, and local account creation.

• Familiarity with MITRE ATT&CK techniques and tactics, covering areas such as credential dumping, lateral movement, persistence mechanisms, and data exfiltration methods.

• Basic understanding of core networking concepts, including common ports and protocols, NAT, public and private IP addresses, and VLANs.

• A strong interest in forensics with experience in analyzing logs, processes, and artifacts to comprehend intrusions.

• Excellent written and verbal communication skills, with the ability to simplify complex technical information for varied audiences, along with a strong inclination for self-directed learning.

• Capability to leverage AI in daily security analysis, validate its outputs, and apply sound judgment.

• Availability to work Perth time (AWST), Monday to Friday, from 8:00 am to 4:00 pm, or similar local hours in other parts of Australia.

🏝️ Benefits

• Fully remote work opportunities.

• At least one annual trip to the US for the Summer Summit, along with additional local events in Australia!

• Reimbursement for new starter home office setup ($800 AUD).

• 12 weeks of paid parental leave for both primary and secondary caregivers.

• Monthly digital allowance for personal phone and internet expenses ($185 AUD).

• Monthly home office technology stipend for upgrading or replacing equipment ($40 AUD).

• Subsidized private health insurance through our preferred provider.

• Stock options available for all full-time employees.

• Access to the BetterUp platform for coaching, personal, and professional development.