Security Operations Analyst – Threat Hunting & IR Lead

Anduril Industries; Costa Mesa (CA); On-site; USD 129,000 - 171,000; Full time

Job summary

Anduril Industries is seeking a Security Operations Analyst to monitor and respond to adversarial activity across endpoints, cloud, and SaaS. You will build detection signatures, drive incident response, and guide detection maturity on cross-functional teams.

As a Senior SecOps Analyst, you may serve as incident commander and mentor junior staff while collaborating with stakeholders to reduce false positives and strengthen security controls. A Top Secret clearance is required.

Qualifications

• Experience in security monitoring, log analysis, and detection engineering across large data sets.
• Proficiency in Python development contributing to automation for SOC operations.
• Experience with one or more SIEM languages (SPL, KQL, SQL).
• Experience analyzing in a data lake environment.
• Broad security knowledge across endpoint, network, identity, application, and cloud infrastructure.
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and ability to collaborate with stakeholders.
• Ability to obtain and hold a U.S. Top Secret security clearance.

Responsibilities

• Triage and respond to alerts and incidents across phishing, endpoints, cloud, and SaaS.
• Build and optimize detection signatures and response playbooks.
• Lead feedback loops to reduce false positives in detections.
• Participate in threat modeling with cross-functional partners.
• Organize threat hunting and data baselines to identify anomalies.
• On-call rotation for security events and incident investigations.
• Mentor junior analysts and collaborate with stakeholders to mature detection/response maturity.

Skills

Security monitoring

Log analysis

Python

SIEM languages (SPL, KQL, SQL)

Threat modeling

Threat hunting

Cloud security

Communication

U.S. Top Secret clearance

Tools

Python

SPL

KQL

SQL

Data lake

Job description

Anduril Industries is seeking a Security Operations Analyst to monitor and respond to adversarial activity across endpoints, cloud, and SaaS. You will build detection signatures, drive incident response, and guide detection maturity on cross-functional teams.

As a Senior SecOps Analyst, you may serve as incident commander and mentor junior staff while collaborating with stakeholders to reduce false positives and strengthen security controls. A Top Secret clearance is required.