Remote CSIRT Lead - Incident Response & Readiness

Huntress; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Huntress, a remote-first cybersecurity company founded by former NSA operators, is seeking an experienced security operations professional to join its 24/7 human-led SOC. You will lead incident response, coordinate with engineering, and drive scalable playbooks and reports.

This role emphasizes proactive preparedness, purple teaming, and continuous improvement to reduce mean time to detect and respond across millions of identities and endpoints.

Responsibilities

• Lead incident identification, triage, and validation as the SOC escalation point.
• Manage the full incident response lifecycle with milestones and blockers.
• Design table-top exercises and purple teaming for organizational readiness.
• Tune telemetry with engineering to achieve high true-positive rates.
• Collaborate with Offensive Security to close visibility gaps against threats.
• Own post-incident reviews and remediation for tooling and processes.
• Develop stakeholder reports and lessons learned after major incidents.
• Maintain playbooks, configurations, and IR standards at scale.

Job description

Huntress, a remote-first cybersecurity company founded by former NSA operators, is seeking an experienced security operations professional to join its 24/7 human-led SOC. You will lead incident response, coordinate with engineering, and drive scalable playbooks and reports.

This role emphasizes proactive preparedness, purple teaming, and continuous improvement to reduce mean time to detect and respond across millions of identities and endpoints.