Remote Security Operations Analyst: Incident Response & Analysis

Huntress; United States; Remote; USD 82,000 - 93,000; Full time

Benefits offered by this job

Remote work 100%

Home office setup allowance

Travel to US

Pension

Coaching/coaching platform

Job summary

Huntress, a remote-first cybersecurity company, is seeking a Security Operations Center Analyst to triage, investigate, respond, and remediate intrusions daily. You will work with a mission-driven team protecting global customers and advancing your analyst skills for career growth.

This role offers a 100% remote environment with a starter home office setup allowance, travel to the US for events, and a pension plan. Strong emphasis on collaboration and learning across the SOC.

Qualifications

• 2+ years in a SOC or DFIR role.
• Experience with Windows, Linux and MacOS attack surfaces.
• Familiar with MITRE ATT&CK framework and basic tooling (PowerShell, CMD).
• Knowledge of static/dynamic malware analysis.
• Experience with AD/Enterprise domain administration basics.
• Networking fundamentals and web technologies knowledge.
• Strong communication and collaboration skills; customer-focused.

Responsibilities

• Triage, investigate, and respond to alerts from the Huntress platform.
• Review EDR telemetry, logs, and artifacts to identify root causes and remediations.
• Perform malware analysis as part of alert triage.
• Investigate suspicious Microsoft 365 activity and provide remediation.
• Assist escalate requests from Product Support related to threats.
• Contribute to detection engineering and tuning efforts.
• Participate in projects to improve outcomes for analysts and partners.

Skills

SOC experience

Windows

Linux

MacOS

MITRE ATT&CK

PowerShell

Malware analysis

Active Directory

Networking concepts

Web technologies

Communication

Customer focus

Curiosity

Tools

HackTheBox

TryHackMe

Blue Team Labs Online

RMMs

Job description

Huntress, a remote-first cybersecurity company, is seeking a Security Operations Center Analyst to triage, investigate, respond, and remediate intrusions daily. You will work with a mission-driven team protecting global customers and advancing your analyst skills for career growth.

This role offers a 100% remote environment with a starter home office setup allowance, travel to the US for events, and a pension plan. Strong emphasis on collaboration and learning across the SOC.