Remote Senior Threat Hunting & Detection Engineer

Huntress Labs; Sydney; Remote; AUD 150,000 - 170,000; Full time

Benefits offered by this job

Fully remote work

Annual trip to US for Summer Summit

Home office setup reimbursement

12 weeks parental leave

Digital phone/internet allowance

Home office tech stipend

Private health insurance

Stock options for all employees

Coaching via BetterUp

Job summary

Huntress Labs is seeking a Senior Detection Engineering & Threat Hunting Analyst to join our remote-first team operating from Australia. In this role you will develop high‑fidelity detections, hunt for adversary activity across millions of endpoints, and collaborate with the SOC to disrupt intrusions.

You’ll turn threat intelligence into practical detections, build scalable rules, and contribute to proactive hunting across identities and endpoints.

Qualifications

• 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response.
• Intermediate knowledge of Windows internals.
• Working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace.
• Experience developing, testing, tuning, and documenting detections from threat intelligence or investigations.

Responsibilities

• Contribute to all parts of the detection lifecycle by creating new rules and testing them before deployment.
• Develop rules across Huntress products and operating systems (ITDR, SIEM, EDR, Windows, Linux, MacOS).
• Manage DE&TH requests from partners.
• Undertake hypothesis-driven hunts across Huntress telemetry.
• Translate IOCs and TTPs into detections using Git workflows.
• Build and refine hunting dashboards/queries to surface intrusions.
• Review attacker activity across Huntress products and surface likely intrusions.

Skills

Detection engineering

Threat hunting

Windows internals

Linux/macOS

Cloud services (Microsoft 365, Azure,+

Tools

OSQuery

Velociraptor

EDR/MDR/XDR platforms

EzTools/RegRipper/Chainsaw

Job description

Huntress Labs is seeking a Senior Detection Engineering & Threat Hunting Analyst to join our remote-first team operating from Australia. In this role you will develop high‑fidelity detections, hunt for adversary activity across millions of endpoints, and collaborate with the SOC to disrupt intrusions.

You’ll turn threat intelligence into practical detections, build scalable rules, and contribute to proactive hunting across identities and endpoints.