Senior Security Operations Analyst — Threat Hunting & Incident Command

Slope; Costa Mesa (CA); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity grants

Comprehensive benefits

Health benefits

Job summary

Anduril Industries is seeking a Senior SecOps Analyst to join the Detection and Response team as the watchtower for critical defense technologies. You will monitor, respond to threats, and drive detection improvements while collaborating with engineers and stakeholders.

The role involves incident leadership, threat modeling, and data-driven security maturity across Cloud, Endpoints, and networks. US Top Secret clearance is required to join this mission-critical team.

Qualifications

• Experience in security monitoring, log analysis across endpoints, networks, and various logs sources.
• Experience in Python development for SOC automation and tooling.
• Proficiency with SIEM languages (SPL, KQL, SQL) and data lake environments.
• Knowledge of attacker TTPs across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills with internal and external stakeholders.
• Must be able to obtain and hold a U.S. Top Secret security clearance.

Responsibilities

• Triage and respond to alerts/incidents across phishing, endpoints, cloud, and SaaS.
• Build and optimize detection signatures, playbooks, and automation.
• Lead incident response as frontline of Detection and Response team; act as incident commander when needed.
• Collaborate with cross-functional partners to model threats and strengthen controls.
• Conduct threat hunting and establish data baselines to identify anomalies.
• Participate in on-call rotation and communicate findings to stakeholders.

Skills

Security Monitoring

Log Analysis

Python Development

SIEM Languages

Data Lake

TTPs

Communication

Security Clearance

Job description

Anduril Industries is seeking a Senior SecOps Analyst to join the Detection and Response team as the watchtower for critical defense technologies. You will monitor, respond to threats, and drive detection improvements while collaborating with engineers and stakeholders.

The role involves incident leadership, threat modeling, and data-driven security maturity across Cloud, Endpoints, and networks. US Top Secret clearance is required to join this mission-critical team.