Senior SecOps Lead: Threat Hunting & Incident Command

Anduril Industries; Seattle (WA); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity grants

Comprehensive benefits

Job summary

Anduril Industries, a leader in defense technology based in the United States, is seeking a Senior SecOps Analyst to oversee security operations on the Detection and Response team. You will triage alerts, respond to incidents across endpoints, cloud, and SaaS, and mentor junior analysts while shaping detection strategies and automation.

The role emphasizes incident command responsibilities, threat modeling with cross-functional partners, and proactive threat hunting to identify anomalies.

Qualifications

• Experience in security monitoring, log analysis, and detection engineering across large data sets.
• Proficient in Python for SOC automation.
• Experience with SIEM languages: SPL, KQL, SQL.
• Experience performing threat hunting and incident response.
• Ability to obtain and hold a U.S. Top Secret clearance.
• Strong communication and collaboration with stakeholders.

Responsibilities

• Triage and respond to alerts and incidents across endpoints, cloud, and SaaS.
• Develop detection signatures and playbooks; automate responses.
• Lead detections feedback loops to reduce false positives.
• Join threat modeling with cross-functional partners for controls and signatures.
• Conduct threat hunting and data baselines to spot anomalies.
• Participate in on-call rotation and incident investigations; brief stakeholders.
• Mentor junior analysts and drive detection maturity.

Skills

Security monitoring

Log analysis

Detection engineering

Python development

SIEM languages (SPL/KQL/SQL)

Threat hunting

Incident response

Communication skills

Top Secret clearance eligibility

Job description

Anduril Industries, a leader in defense technology based in the United States, is seeking a Senior SecOps Analyst to oversee security operations on the Detection and Response team. You will triage alerts, respond to incidents across endpoints, cloud, and SaaS, and mentor junior analysts while shaping detection strategies and automation.

The role emphasizes incident command responsibilities, threat modeling with cross-functional partners, and proactive threat hunting to identify anomalies.