Senior Internal CSIRT Lead (Remote)

Huntress Labs; United States; Remote; USD 200,000 - 210,000; Full time

Benefits offered by this job

401(k) with 5% contribution

Paid time off

Parental leave (12 weeks)

Medical, dental, vision benefits

Stock options for all full-time

Home office stipend $500

Job summary

Huntress Labs is seeking a Staff CSIRT Analyst to lead internal security resilience and act as the primary escalation point for the SOC. You will strategize with leaders across functions, own end-to-end incident response, and guide teams to anticipate blockers and drive improvements.

You will collaborate with engineering, product security, and detection teams to optimize telemetry and drive preparedness. This remote role offers a high-impact environment with a focus on proactive security and

Qualifications

• 8+ years of experience in Incident Response, SOC Operations, or Digital Forensics (DFIR).
• Advanced knowledge of EDR/MDR platforms, log aggregation (SIEM/ELK), and cloud security environments (AWS/Azure/M365).
• Proven ability to articulate root causes of complex problems and translate insights into solutions.
• Experience leading small project teams and aligning tech stacks across functions.
• Exceptional ability to convey incident details to technical teams and executives.
• Familiarity with automation/SOAR platforms and documentation tools like Confluence, Jira, and Lucidchart.
• Proactive, forward-thinking approach to security with a culture of security stewardship.

Responsibilities

• Incident Response & Triage: Lead identification, triage, and validation of security incidents; escalation point for SOC.
• Strategic Preparedness: Design and run incident readiness exercises (tabletops, purple teaming).
• Telemetry Optimization: Tune telemetry sources with engineering and detection teams to improve true-positive rate.
• Offensive Security Partnership: Collaborate with Offensive Security to cover visibility gaps and align with product security.
• Continuous Improvement & Leadership: Lead Post-Incident Reviews; own remediation task lifecycle and tooling improvements.
• Stakeholder Communication: Develop and present lessons learned to stakeholders after major incidents.
• Documentation: Create and maintain playbooks, configurations, and incident response standards.

Skills

Incident response

SOC operations

Digital forensics

Cloud security

EDR/MDR

SIEM ELK

Communication

Strategic thinking

Project leadership

Documentation

Tools

Confluence

Jira

Lucidchart

ELK Stack

AWS

Azure

M365

Job description

Huntress Labs is seeking a Staff CSIRT Analyst to lead internal security resilience and act as the primary escalation point for the SOC. You will strategize with leaders across functions, own end-to-end incident response, and guide teams to anticipate blockers and drive improvements.

You will collaborate with engineering, product security, and detection teams to optimize telemetry and drive preparedness. This remote role offers a high-impact environment with a focus on proactive security and