Senior SecOps Analyst - Threat Hunting & IR Lead

Slope; Washington (District of Columbia); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity grants

Comprehensive benefits

Job summary

Anduril Industries is a defense tech company seeking a Senior SecOps Analyst to monitor and respond to threats across endpoints, cloud, and SaaS. You’ll develop detection signatures, participate in threat modeling, and lead incident response as needed.

As part of the Detection and Response team, you will mentor junior analysts, perform threat hunting, and communicate findings to stakeholders. A US Top Secret clearance is required for this role.

Qualifications

• Experience in security monitoring, log analysis, and detection engineering across endpoints, networks, and log sources.
• Experience in Python development, contributing to a shared SOC automation codebase.
• Must have experience with one or more SIEM languages (SPL, KQL, SQL).
• Experience conducting analysis in a data lake environment.
• Broad security knowledge across endpoints, network, identity, application, and cloud.
• Knowledge of attacker TTPs across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and ability to collaborate with stakeholders.
• Must be able to obtain and hold a U.S. Top Secret security clearance.

Responsibilities

• Triage and respond to alerts / incidents covering phishing, endpoints, cloud infrastructure, services, and SaaS applications.
• Build and optimize tailored detection signatures, runbooks, and response automation.
• Lead the feedback loop for detections to reduce false positives.
• Participate in threat modeling with cross-functional partners for cloud, mobile, endpoints, and other environments.
• Organize and conduct threat hunting and data baselines to identify anomalies.
• Participate in on-call rotation and incident response investigations; act as incident commander when needed.
• Mentor and guide junior analysts and collaborate with a wide range of stakeholders.

Skills

Python development

Threat hunting

SPL / KQL / SQL

Data lake experience

Security communications

Top Secret clearance

Tools

Cloud platforms (AWS/Azure)

Job description

Anduril Industries is a defense tech company seeking a Senior SecOps Analyst to monitor and respond to threats across endpoints, cloud, and SaaS. You’ll develop detection signatures, participate in threat modeling, and lead incident response as needed.

As part of the Detection and Response team, you will mentor junior analysts, perform threat hunting, and communicate findings to stakeholders. A US Top Secret clearance is required for this role.