Remote SOC Analyst: Malware Analysis & EDR/TTPs Expert

Rootedsec; Northern (KY); Hybrid; USD 100,000 - 125,000; Full time

Job summary

Huntress is seeking a fully remote Security Operations Analyst in the United States to triage and respond to EDR alerts, investigate malware and Microsoft 365 threats within a managed SOC. The role emphasizes malware analysis, alert triage, and detection tuning, with potential weekend or 4x10 shifts for coverage.

You will review telemetry across Windows, Linux and macOS, contribute to playbooks, and collaborate with cross-functional teams to improve detection capabilities.

Qualifications

• 4+ years in a SOC or DFIR role.
• Windows, Linux and macOS as attack surfaces.
• MITRE ATT&CK and attacker techniques.
• Static and dynamic malware analysis.
• Active Directory and Group Policy knowledge.
• Networking and web/OWASP fundamentals.
• Remote within the US.

Responsibilities

• Triage, investigate and respond to platform alerts.
• Review EDR/SIEM telemetry and forensic artifacts to find root cause.
• Perform tactical malware analysis.
• Investigate suspicious Microsoft 365 / cloud activity.
• Contribute to detection creation and tuning

Skills

EDR/SIEM analysis

Malware analysis

Threat hunting

SOC/DFIR experience

Windows/Linux/macOS

Tools

EDR tools

SIEM

M365 security

Active Directory

Group Policy

Job description

Huntress is seeking a fully remote Security Operations Analyst in the United States to triage and respond to EDR alerts, investigate malware and Microsoft 365 threats within a managed SOC. The role emphasizes malware analysis, alert triage, and detection tuning, with potential weekend or 4x10 shifts for coverage.

You will review telemetry across Windows, Linux and macOS, contribute to playbooks, and collaborate with cross-functional teams to improve detection capabilities.