Senior SecOps Analyst & Incident Commander

Anduril Industries; Seattle (WA); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity grants

Comprehensive benefits

Health coverage

Job summary

Anduril Industries is seeking a Senior SecOps Analyst to monitor and respond to threats against critical defense technologies. You will lead detections, respond to security events, and mentor junior analysts within the Detection and Response team.

Strong collaboration with stakeholders and incident command experience are key components of the role. The position requires experience with security monitoring, Python automation, SIEMs, and cloud/workload security across Windows, Linux, and MacOS,

Qualifications

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and various log sources.
• Experience in Python development, contributing to a shared codebase for SOC automation.
• Must have experience with one or more SIEM languages (SPL, KQL, SQL).
• Experience conducting analysis in a data lake environment.
• Broad security knowledge across endpoint, network, identity, app, and cloud.
• Knowledge of attacker TTPs across Windows, Linux, MacOS, AWS/Azure, etc.

Responsibilities

• Triage and respond to alerts/incidents across phishing, endpoints, cloud infrastructure and SaaS apps.
• Build and optimize detection signatures, playbooks, and automation using detection-as-code.
• Lead the feedback loop to reduce false positives and tune alerts.
• Participate in threat modeling with cross-functional partners for cloud, mobile, endpoints, etc.
• Conduct threat hunting and data baselines to identify anomalous patterns.
• Participate in on-call rotations and incident response investigations for senior leadership alignment.

Skills

Python development

SIEM languages

Threat hunting

Data lake analysis

Incident response

Communication

Job description

Anduril Industries is seeking a Senior SecOps Analyst to monitor and respond to threats against critical defense technologies. You will lead detections, respond to security events, and mentor junior analysts within the Detection and Response team.

Strong collaboration with stakeholders and incident command experience are key components of the role. The position requires experience with security monitoring, Python automation, SIEMs, and cloud/workload security across Windows, Linux, and MacOS,