Security Operations Analyst

This is a fully remote position, open to applicants in Ireland.

📋 Description

• Manage, assess, and respond to alerts generated by the Huntress platform.

• Conduct tactical reviews of EDR telemetry, log sources, and forensic evidence to identify the root cause of attacks and suggest remediation strategies.

• Execute tactical malware analysis while investigating and prioritizing alerts.

• Examine suspicious activities within Microsoft M365 and offer remediation solutions.

• Support Product Support escalations regarding threat-related and SOC-relevant inquiries.

• Participate in the development and refinement of detection engineering.

• Engage in projects aimed at enhancing outcomes for analysts and partners.

• Contribute to a collaboratively mentored team environment.

⛳️ Requirements

• Minimum of 2 years of experience in a SOC or Digital Forensics (DFIR) position.

• Proven experience with Windows, Linux, and MacOS as potential attack surfaces.

• Familiarity with fundamental Threat Actor tools and techniques, including the MITRE ATT&CK Framework, PowerShell, Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, and other offensive/Red Team TTPs.

• Demonstrated understanding of both static and dynamic malware analysis principles.

• Practical knowledge of Windows Administration or Enterprise Domain Administration, encompassing Active Directory, Group Policy, and Domain Trusts.

• Basic understanding of core networking concepts, including common ports/protocols, NAT, Public/Private IPs, and VLANs.

• Knowledge of web technologies and concepts, including web servers/applications and the OWASP top 10.

• Strong communication skills, capable of articulating complex issues to non-technical audiences.

• Committed to prioritizing customer needs and addressing their concerns.

• A strong sense of curiosity and a genuine enthusiasm for learning.

• Prior experience in an MSP/MSSP/MDR role is preferred.

• Experience with Linux and MacOS investigative practices is preferred.

• Proficiency in scripting languages such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby is preferred.

• Proven experience on platforms like HackTheBox, TryHackMe, Blue Team Labs Online, or similar is preferred.

• Experience with cloud-based investigations involving M365, Azure, AWS, or GCP is preferred.

• Participation in cybersecurity competitions such as Capture the Flags or Collegiate Cyber Defense Competition is preferred.

• Familiarity with MSP tools like RMMs is preferred.

🏝️ Benefits

• Fully remote work environment.

• Reimbursement for new starter home office setup (£398).

• Generous personal leave entitlements.

• Monthly digital reimbursement (£92).

• Opportunities to travel to the US 1-2 times per year for various company events.

• Pension plan.

• Access to the BetterUp platform for coaching, personal, and professional development.