Remote Senior CSIRT Analyst — Incident Response Leader

Saasventurecapital; United States, Northern America, Americas; Remote; USD 200,000 - 210,000; Full time

Benefits offered by this job

Remote work

Generous PTO and holidays

Parental leave 12 weeks

Medical, dental, vision plans

401(k) with 5% employer match

Stock options

Home office stipend $500

Education and dev allowance

Digital reimbursement $75/month

Coaching via BetterUp

Job summary

Huntress is a remote-first cybersecurity company seeking a Staff CSIRT Analyst. You will act as the primary internal escalation point for the SOC, owning end-to-end incident response lifecycle and coordinating across leadership to identify work streams and milestones.

With 8+ years in Incident Response or DFIR, you will drive organizational readiness, tune telemetry, and collaborate with engineering, detection teams, and product security to harden defenses and improve response across the

Qualifications

• 8+ years of experience in Incident Response, SOC Operations, or DFIR.
• Advanced knowledge of EDR/MDR platforms, SIEM/ELK, and cloud security environments (AWS/Azure/M365).
• Strong ability to communicate complex incident details to technical and executive audiences.

Responsibilities

• Lead identification, triage, and validation of security incidents across telemetry sources.
• Design and run incident readiness exercises (tabletops, purple teaming).
• Tune telemetry sources to improve detection and reduce noise.
• Collaborate with offensive security to close visibility gaps.
• Lead Post-Incident Reviews and drive remediation tooling and processes.
• Prepare reports and lessons learned for stakeholders.

Skills

Incident Response

SOC Operations

DFIR

Cloud Security

Security Analytics

Automation

Tools

SIEM/ELK

EDR/MDR

Confluence

Jira

LucidChart

Terraform

Job description

Huntress is a remote-first cybersecurity company seeking a Staff CSIRT Analyst. You will act as the primary internal escalation point for the SOC, owning end-to-end incident response lifecycle and coordinating across leadership to identify work streams and milestones.

With 8+ years in Incident Response or DFIR, you will drive organizational readiness, tune telemetry, and collaborate with engineering, detection teams, and product security to harden defenses and improve response across the