Senior SecOps Analyst - Incident Commander & Threat Hunter

AI Chopping Block; Costa Mesa, Northern (CA, KY); Hybrid; USD 129,000 - 171,000; Full time

Job summary

Anduril Industries is seeking a Security Operations Analyst to act as the watchtower for defense technologies. You will monitor and respond to adversarial activity, help integrate key detection feedback with the detection engineering team, and serve as incident commander when needed.

In this role you will tune alerts, conduct threat hunting, perform data normalization across datasets, and mentor junior analysts while collaborating with cross-functional partners to strengthen security controls

Qualifications

• Experience with security monitoring across endpoints, networks, and cloud logs.
• Proficient in Python to automate SOC tasks.
• Hands-on with SIEM languages (SPL, KQL, SQL).
• Experience analyzing data lakes.
• Knowledge of attacker tactics, techniques, and procedures (TTPs).
• Strong communication with stakeholders.

Responsibilities

• Triage and respond to alerts and incidents across endpoints, cloud, and SaaS.
• Develop detection signatures and playbooks using code.
• Lead detections feedback loops to reduce false positives.
• Participate in threat modeling with cross-functional partners.
• Conduct threat hunting and data baselines to identify anomalies.
• On-call rotation and incident response, reporting findings.
• Mentor junior analysts and guide detection maturity.

Skills

Security monitoring

Log analysis

Detection engineering

Python development

SIEM (SPL/KQL/SQL)

Data lake analysis

Security principles

TTP knowledge

Communication

Top Secret clearance

Job description

Anduril Industries is seeking a Security Operations Analyst to act as the watchtower for defense technologies. You will monitor and respond to adversarial activity, help integrate key detection feedback with the detection engineering team, and serve as incident commander when needed.

In this role you will tune alerts, conduct threat hunting, perform data normalization across datasets, and mentor junior analysts while collaborating with cross-functional partners to strengthen security controls