Senior SecOps Analyst: Threat Hunting & IR Lead

Slope; Seattle (WA); On-site; USD 129,000 - 171,000; Full time

Job summary

Anduril Industries is seeking a Senior SecOps Analyst to join our Detection and Response team. You will monitor and respond to adversarial activity, integrating detections with engineering to safeguard critical defense technologies.

As incident commander when needed, you will drive threat hunting, data normalization, and collaboration with stakeholders to elevate detection maturity and mentor junior analysts.

Qualifications

• Experience in security monitoring and log analysis across endpoints, networks, and a wide variety of application log sources.
• Proficient in Python for automating SOC operations and contributing to a shared codebase.
• Experience with SIEM languages (SPL, KQL, SQL) and data lake environments.
• Broad security knowledge across endpoint, network, identity, and cloud infrastructure.
• Knowledge of attacker TTPs across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication and collaboration with stakeholders; ability to obtain and hold a U.S. Top Secret clearance.

Responsibilities

• Triage and respond to alerts/incidents across endpoints, cloud and SaaS platforms.
• Build and optimize detection signatures, playbooks, and automation.
• Lead feedback loop for detections to reduce false positives.
• Participate in threat modeling with cross-functional partners to improve controls.
• Organize threat hunting and data baselines to identify anomalies.
• Join on-call rotations and conduct incident investigations; act as incident commander as needed.
• Mentor junior analysts and guide detection and response maturity.

Skills

Security monitoring

Log analysis

Python development

Detection engineering

Threat hunting

Incident response

Threat modeling

Communication skills

Cloud security

Tools

SPL

KQL

SQL

Data lake

AWS

Azure

Job description

Anduril Industries is seeking a Senior SecOps Analyst to join our Detection and Response team. You will monitor and respond to adversarial activity, integrating detections with engineering to safeguard critical defense technologies.

As incident commander when needed, you will drive threat hunting, data normalization, and collaboration with stakeholders to elevate detection maturity and mentor junior analysts.