Remote SOC Analyst: Threat Hunting & Incident Response

Huntress; United States; On-site; USD 100,000 - 125,000; Full time

Benefits offered by this job

Remote work

Paid time off

Parental leave 12 weeks

Medical/Dental/Vision

401(k)

Life and Disability insurance

Stock options

Home office stipend

Education allowance

Digital reimbursement

Coaching access

Job summary

Huntress is seeking a Security Operations Center Analyst to join our fully remote team. In this role, you will triage, investigate, respond to alerts, and remediate intrusions across a global customer base while advancing your SOC/DFIR skills.

You’ll work with Windows, Linux, and MacOS as attack surfaces, leverage MITRE ATT&CK techniques, and collaborate with passionate teammates who are dedicated to reducing cyber risk for organizations of all sizes.

Qualifications

• 4+ years of experience in a SOC or DFIR role.
• Windows, Linux, and MacOS as attack surfaces.
• MITRE ATT&CK Framework, PowerShell & Command Prompt Terminal knowledge.
• Static and dynamic malware analysis concepts.

Responsibilities

• Triage, investigate, and respond to alerts from the Huntress platform.
• Perform tactical review of telemetry and artifacts to determine root cause and remediations.
• Perform tactical malware analysis as part of triaging alerts.
• Investigate suspicious Microsoft M365 activity and provide remediations.
• Assist in escalations from the Product Support team for threat-related questions.
• Contribute to detection engineering creation and tuning efforts.
• Contribute to projects focused on better outcomes for analysts and partners.
• Collaborate within a mentored team to improve everyone's skills.

Skills

SOC experience

EDR analysis

Malware analysis

Windows/Linux/MacOS

Threat intelligence

Communication

MITRE ATT&CK

PowerShell

Tools

EDR tooling

Job description

Huntress is seeking a Security Operations Center Analyst to join our fully remote team. In this role, you will triage, investigate, respond to alerts, and remediate intrusions across a global customer base while advancing your SOC/DFIR skills.

You’ll work with Windows, Linux, and MacOS as attack surfaces, leverage MITRE ATT&CK techniques, and collaborate with passionate teammates who are dedicated to reducing cyber risk for organizations of all sizes.