Senior Detection Engineer & Threat Hunter (Remote)

Huntress; United States; Remote; USD 105,000 - 119,000; Full time

Benefits offered by this job

Fully remote work

Annual US trip for Summer Summit

Home office setup reimbursement ($800)

12 weeks parental leave

Digital allowance ($185 AUD)

Home office stipend ($40 AUD)

Private health insurance

Stock options

BetterUp coaching

Job summary

Huntress is seeking a Senior Detection Engineering and Threat Hunting Analyst to join our remote Australia team. You will design, test, and tune detections that protect millions of endpoints while collaborating with a 24/7 SOC and related teams.

You will hunt for stealthy attacker techniques, turn threat intel into detections, and scale detection across identities and endpoints. This role offers remote work, equity, and ongoing learning opportunities.

Qualifications

• Experience developing, testing, tuning, and documenting detections from threat intel or investigations.
• Ability to communicate findings through clear written reports.
• Knowledge of Windows internals.
• Understanding of adversary tradecraft and ATT&CK techniques.

Responsibilities

• Create, test, and tune detection rules across ITDR, SIEM, EDR, Windows, Linux, and macOS.
• Manage DE/TH requests and coordinate with partners.
• Undertake hypothesis-driven hunts across telemetry.
• Build dashboards and queries to surface intrusions.
• Investigate intrusions and provide incident reports.
• Contribute to community content and AI-driven workflows.
• Use AI workflows to prototype queries and validate outputs.

Skills

Detection engineering

Threat hunting

SOC operations

Threat intelligence

Tools

Sigma

Suricata

Snort

YARA

KQL

EQL

ES|QL

Splunk SPL

OSquery

Velociraptor

Job description

Huntress is seeking a Senior Detection Engineering and Threat Hunting Analyst to join our remote Australia team. You will design, test, and tune detections that protect millions of endpoints while collaborating with a 24/7 SOC and related teams.

You will hunt for stealthy attacker techniques, turn threat intel into detections, and scale detection across identities and endpoints. This role offers remote work, equity, and ongoing learning opportunities.