Senior SecOps Analyst – Incident Commander

Anduril-1; Seattle (WA); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity grants

Benefits package

Job summary

Anduril Industries is seeking a Security Operations Analyst to monitor, detect, and respond to threats across endpoints, cloud, and applications. You’ll lead detections, write automation, and collaborate with engineering to harden defenses. A Senior role involves incident command and mentoring junior staff.

The team emphasizes threat hunting, threat modeling, and feedback loops to optimize detections. Top-secret clearance is required for eligibility, with competitive compensation and equity.

Qualifications

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and a variety of logs sources.
• Proficiency in Python for automating SOC ops and contributing to a shared codebase.
• Experience with one or more SIEM languages (SPL, KQL, SQL).
• Knowledge of attacker TTPs across Windows, Linux, MacOS, AWS/Azure.
• Ability to obtain and hold a U.S. Top Secret clearance.

Responsibilities

• Triage and respond to alerts/incidents across phishing, endpoints, cloud, and SaaS applications.
• Build detection signatures, playbooks, and automation using detection-as-code.
• Lead detection feedback loops to reduce false positives as frontline of DNR.
• Participate in threat modeling with cross-functional partners to strengthen controls and detections.
• Conduct threat hunting and data baselines to identify anomalous patterns.
• Participate in on-call rotations and communicate findings to stakeholders.

Skills

Security monitoring

Log analysis

Detection engineering

Python development

SIEM languages

Threat hunting

Threat modeling

Incident response

Communication skills

Security clearance

Tools

SPL

KQL

SQL

Job description

Anduril Industries is seeking a Security Operations Analyst to monitor, detect, and respond to threats across endpoints, cloud, and applications. You’ll lead detections, write automation, and collaborate with engineering to harden defenses. A Senior role involves incident command and mentoring junior staff.

The team emphasizes threat hunting, threat modeling, and feedback loops to optimize detections. Top-secret clearance is required for eligibility, with competitive compensation and equity.