Remote SOC Analyst: Triage, Hunt & Resolve Incidents

Huntress; New York (NY); A distancia; USD 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401K Match

Health Benefits

Remote work

PTO & Leave

Stock Options

Digital monthly reimbursements

Pension

Descripción de la vacante

Huntress is seeking a Security Operations Center Analyst to triage, investigate, respond, and remediate a variety of intrusions daily. You will be surrounded by mission-driven colleagues and have opportunities to advance your skills while protecting organizations globally from cyberattacks.

You will triage alerts from the Huntress platform, review EDR telemetry and artifacts to determine root causes, and provide remediations.

Formación

• 2+ years of experience in a SOC or Digital Forensics (DFIR) role.
• Working knowledge of Windows Administration or Enterprise Domain Administration.
• Demonstrated experience with Windows, Linux, and MacOS as an attack surface.
• Experience with basic Threat Actor tools and techniques (MITRE ATT&CK, PowerShell, etc.).
• Working knowledge of web technologies and concepts.

Responsabilidades

• Triage, investigate, and respond to alerts from the Huntress platform.
• Perform tactical review of EDR telemetry, logs, and artifacts to determine root causes and remediations.
• Investigate suspicious M365 activity and provide remediations.
• Assist in escalations from Product Support for threat-related questions.
• Contribute to detection engineering creation and tuning efforts.
• Participate in projects to improve analyst and partner outcomes.

Conocimientos

SOC operations

Threat hunting

MITRE ATT&CK

Windows/Linux/macOS

Threat intelligence

Communication

Herramientas

PowerShell

Python

Linux

Windows Admin

Descripción del empleo

Huntress is seeking a Security Operations Center Analyst to triage, investigate, respond, and remediate a variety of intrusions daily. You will be surrounded by mission-driven colleagues and have opportunities to advance your skills while protecting organizations globally from cyberattacks.

You will triage alerts from the Huntress platform, review EDR telemetry and artifacts to determine root causes, and provide remediations.