Senior SecOps Analyst: Threat Hunting & Incident Lead

Anduril-1; Boston (MA); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity grants

Benefits package

Job summary

Anduril Industries is seeking a Senior Security Operations Analyst to monitor, detect, and respond to adversarial activity across endpoints, cloud, and SaaS environments. You will lead incident response, develop detection signatures, and drive the feedback loop to reduce false positives within the Detection and Response team.

You'll collaborate with cross-functional partners on threat modeling, data baselines, and on-call rotations, mentoring junior analysts while upholding high security

Qualifications

• Experience in security monitoring across endpoints, networks, and cloud services.
• Proficiency with Python for SOC automation and tooling.
• Experience with one or more SIEM languages (SPL, KQL, SQL).
• Ability to conduct threat hunting and incident response at scale.

Responsibilities

• Triage and respond to alerts / incidents across phishing, endpoints, cloud, and SaaS.
• Build detection signatures, playbooks, and automation via code.
• Lead alert feedback to reduce false positives as frontline of DNR.
• Participate in threat modeling with cross-functional partners.
• Organize threat hunting and data baselines to identify anomalies.
• Contribute to on-call rotations and incident investigations; act as incident commander when needed.
• Mentor junior analysts and collaborate with stakeholders to mature detection maturity.

Skills

Security monitoring

Log analysis

Detection engineering

Python development

SIEM languages

Threat hunting

On-call experience

Job description

Anduril Industries is seeking a Senior Security Operations Analyst to monitor, detect, and respond to adversarial activity across endpoints, cloud, and SaaS environments. You will lead incident response, develop detection signatures, and drive the feedback loop to reduce false positives within the Detection and Response team.

You'll collaborate with cross-functional partners on threat modeling, data baselines, and on-call rotations, mentoring junior analysts while upholding high security