Senior SecOps Analyst: Incident Commander & Threat Hunter

Anduril-1; Costa Mesa (CA); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity grants

Top-tier benefits

Job summary

Anduril Industries in Costa Mesa, CA is seeking a Senior SecOps Analyst to monitor, detect, and respond to threats across endpoints, cloud, and SaaS. You will serve as incident commander on major events and drive improvements to detection programs.

As part of the Detection and Response team, you will run threat hunts, build detection signatures, and collaborate with engineering to reduce false positives. A TS clearance is required for this role.

Qualifications

• Experience in security monitoring, log analysis, and detection engineering across endpoints, networks, and a wide variety of application log sources.
• Experience in Python development for automating SOC operations.
• Experience with one or more SIEM languages (SPL, KQL, SQL).
• Experience in data lake environments.
• Broad security knowledge across endpoints, networks, identity, applications, and cloud infrastructure.
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and experience collaborating with internal and external stakeholders.
• Must be able to obtain and hold a U.S. Top Secret security clearance.

Responsibilities

• Triage and respond to alerts / incidents across phishing, endpoints, cloud infrastructure and services, and SaaS applications
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles
• Lead the feedback loop for detections, ensuring alerts are fine-tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations while effectively communicating findings to key stakeholders; as Senior, serve as incident commander as necessary
• Proactively collaborate with a wide range of stakeholders, guiding detection and response maturity of key worlds, leading incidents and large-scale data baselines

Skills

Security monitoring

Python development

SIEM languages

Threat analysis

Data lake

Threat hunting

Communication

Top Secret clearance

Job description

Anduril Industries in Costa Mesa, CA is seeking a Senior SecOps Analyst to monitor, detect, and respond to threats across endpoints, cloud, and SaaS. You will serve as incident commander on major events and drive improvements to detection programs.

As part of the Detection and Response team, you will run threat hunts, build detection signatures, and collaborate with engineering to reduce false positives. A TS clearance is required for this role.