Senior Security Operations Analyst – Threat Hunting & IR

Anduril Industries; Boston (MA); On-site; USD 129,000 - 171,000; Full time

Benefits offered by this job

Equity grants

Comprehensive benefits

RSU/bonus eligibility

Job summary

Anduril Industries is seeking a Senior Security Operations Analyst to join the Detection and Response team in the United States. You will triage alerts, build tailored detection signatures and run threat-hunting initiatives across cloud, endpoints, and SaaS platforms.

As incident commander on complex events, you’ll mentor junior analysts and collaborate with cross-functional partners to improve detection maturity and reduce false positives, while communicating findings to key stakeholders.

Qualifications

• Experience in security monitoring and log analysis across large data sets.
• Proficient in Python for SOC automation and tooling.
• Familiar with SIEM languages such as SPL, KQL, and SQL.
• Must be able to obtain and hold a U.S. Top Secret clearance.
• Experience with data lake environments.

Responsibilities

• Triage and respond to alerts/incidents across phishing, endpoints, cloud, and SaaS.
• Build and optimize detection signatures, playbooks, and automation.
• Lead feedback loop for detections to reduce false positives.
• Conduct threat modeling with cross-functional partners to improve controls and detections.
• Organize threat hunting and data baselines to identify anomalies.
• Participate in on-call rotations and incident investigations, acting as incident commander as needed.
• Mentor junior analysts and driveDetection/Response maturity with stakeholders.

Skills

Security monitoring

Threat hunting

Python development

Threat intel

Communication

US Top Secret clearance

Tools

SPL

KQL

SQL

Python

Job description

Anduril Industries is seeking a Senior Security Operations Analyst to join the Detection and Response team in the United States. You will triage alerts, build tailored detection signatures and run threat-hunting initiatives across cloud, endpoints, and SaaS platforms.

As incident commander on complex events, you’ll mentor junior analysts and collaborate with cross-functional partners to improve detection maturity and reduce false positives, while communicating findings to key stakeholders.