Senior SecOps Analyst — Incident Commander & Threat Hunter

Anduril Industries; Costa Mesa (CA); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity incentives

Comprehensive benefits package

Job summary

Anduril Industries seeks a Security Operations Analyst on the Detection and Response team to monitor, respond, and hunt threats against critical defense technologies. You will act as incident commander with senior analysts and drive improvements in detections and incident handling.

The role emphasizes collaboration across Cloud, Endpoints, and Network environments, with opportunities to mentor teammates and influence security controls.

Qualifications

• Experience in security monitoring, log analysis, and detection engineering across large data sets.
• Experience with Python development for SOC automation.
• Proficiency with one or more SIEM languages (SPL, KQL, SQL).
• Experience in data lake environments.
• Broad security knowledge across endpoints, networks, identity, apps, and cloud.
• Familiarity with Windows, Linux, MacOS, and cloud platforms (AWS/Azure).
• Strong communication and collaboration with stakeholders.
• Must be able to obtain and hold a U.S. Top Secret security clearance.

Responsibilities

• Triage and respond to alerts and incidents across phishing, endpoints, cloud, and SaaS.
• Build and optimize detection signatures, playbooks, and automation.
• Lead detection feedback loops to reduce false positives.
• Participate in threat modeling with cross-functional teams.
• Organize threat hunting and establish data baselines.
• Engage in on-call rotations and incident response investigations.
• Mentor junior analysts and guide detection maturity.

Skills

Security monitoring

Log analysis

Detection engineering

Python development

SIEM languages

Threat hunting

Incident response

Threat modeling

Communication skills

Top Secret clearance

Tools

SPL

KQL

SQL

Job description

Anduril Industries seeks a Security Operations Analyst on the Detection and Response team to monitor, respond, and hunt threats against critical defense technologies. You will act as incident commander with senior analysts and drive improvements in detections and incident handling.

The role emphasizes collaboration across Cloud, Endpoints, and Network environments, with opportunities to mentor teammates and influence security controls.