Senior SecOps Analyst & Incident Commander

Anduril Industries; Washington; On-site; USD 129,000 - 171,000; Full time

Job summary

Anduril Industries is seeking a Senior Security Operations Analyst for its Detection and Response team. You will monitor alerts across endpoints, cloud, and SaaS, respond to incidents, and act as an incident commander when needed.

You will develop detection signatures, participate in threat modeling, perform threat hunting, and mentor junior analysts while collaborating with cross-functional partners.

Qualifications

• Experience in security monitoring, log analysis, and detection engineering across large data sets.
• Experience in Python development for SOC automation.
• Proficiency with one or more SIEM languages (SPL, KQL, SQL).
• Experience analyzing data in a data lake environment.
• Broad security knowledge across endpoints, networks, identity, cloud.
• Knowledge of attacker TTPs across Windows, Linux, MacOS, AWS/Azure.
• Strong communication and collaboration skills.
• U.S. Top Secret clearance eligibility.

Responsibilities

• Triage and respond to alerts / incidents covering multiple disciplines including phishing, endpoints, cloud infrastructure and services, and SaaS applications
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles
• Lead the feedback loop for detections, ensuring alerts are fine tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations while effectively communicating findings
• Mentor junior analysts and collaborate with stakeholders to mature detection and response capabilities

Skills

Security monitoring

Python development

SIEM languages

Data lake analysis

Endpoint/cloud security

TTPs knowledge

Communication skills

U.S. Top Secret clearance

Job description

Anduril Industries is seeking a Senior Security Operations Analyst for its Detection and Response team. You will monitor alerts across endpoints, cloud, and SaaS, respond to incidents, and act as an incident commander when needed.

You will develop detection signatures, participate in threat modeling, perform threat hunting, and mentor junior analysts while collaborating with cross-functional partners.