Remote Security Operations Analyst - Threat Hunting & IR

Huntress; Northern (KY); Hybrid; USD 100,000 - 125,000; Full time

Benefits offered by this job

Remote work

Paid time off

12 weeks parental leave

Medical, dental, vision benefits

401(k) 5% match

Stock options for all full-time staff

Home office stipend $500

Education/professional development

Coaching & growth via BetterUp

Job summary

Huntress is seeking a Security Operations Center Analyst to triage, investigate, and respond to intrusions daily. You will work in a fully remote, global team protecting organizations from cyberattacks while advancing your analyst skills and career.

Training is Monday–Friday during onboarding, with shifts potentially changing post-training. You will join an elite SOC team focused on threat hunting, incident response, and remediation across Windows, Linux, and MacOS environments, with

Qualifications

• 2+ years of experience in a SOC or Digital Forensics role.
• Demonstrated experience with Windows, Linux, and MacOS as an attack surface.
• Familiarity with MITRE ATT&CK, PowerShell & CMD, WMIC, Scheduled Tasks, Windows Domain enumeration, lateral movement basics, defense evasion basics.
• Knowledge of static and dynamic malware analysis concepts.
• Working knowledge of Windows Administration or Enterprise Domain Administration.
• Understanding of core networking concepts.
• Understanding of web technologies.
• Strong communication skills to explain complex events to non-technical audiences.
• Customer-focused decision making and curiosity to learn.

Responsibilities

• Triage, investigate, and respond to alerts from the Huntress platform.
• Review telemetry and artifacts to determine root causes and provide remediations.
• Conduct tactical malware analysis as part of incident triage.
• Investigate suspicious Microsoft M365 activity and provide remediation.
• Assist in escalations from Product Support on threat-related questions.
• Contribute to detection engineering and tuning efforts.
• Collaborate on projects to improve outcomes for analysts and partners.
• Be part of a mentored team focused on collective improvement.

Skills

SOC experience

Cross-OS exposure

MITRE ATT&CK

Malware analysis

Windows admin

Networking basics

Web technologies

Communication skills

Customer focus

Curiosity

Tools

HackTheBox

TryHackMe

Blue Team Labs

M365/Azure/AWS/GCP

Job description

Huntress is seeking a Security Operations Center Analyst to triage, investigate, and respond to intrusions daily. You will work in a fully remote, global team protecting organizations from cyberattacks while advancing your analyst skills and career.

Training is Monday–Friday during onboarding, with shifts potentially changing post-training. You will join an elite SOC team focused on threat hunting, incident response, and remediation across Windows, Linux, and MacOS environments, with