Senior Threat Hunting & Detection Engineer (Remote)

Huntress Labs; United States; A distancia; USD 105.000 - 119.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully remote work

At least one annual trip to the US for

Summer Summit, with additional local澳?

New starter home office set up reimb.*

12 weeks paid parental leave for both?

Monthly digital allowance for personal

Monthly home office tech stipend

Subsidised private health insurance

Stock options for all full-time

BetterUp coaching access

Descripción de la vacante

Huntress Labs in a remote setup is seeking a Senior Detection Engineering and Threat Hunting Analyst to join a 24/7 SOC ecosystem. You will design and deploy scalable detections, hunt across massive telemetry, and collaborate with multiple teams to disrupt attacker activity.

You will also translate threat intel into production-ready detections and contribute to community-driven content. The role emphasizes developing high-fidelity detections, minimizing false positives, and operating within a

Formación

• 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response.
• Intermediate knowledge of Windows internals.
• Working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace.
• Experience developing, testing, tuning, and documenting detections or analytics from threat intel, IOCs, hypotheses, or investigations.

Responsabilidades

• Contribute to all parts of the detection lifecycle by creating new rules, testing them before deployment, monitoring efficacy, and tuning, promoting, or retiring rules based on performance.
• Develop rules across Huntress products and OSes (ITDR, SIEM, EDR, Windows, Linux, MacOS).
• Manage DE&TH requests raised internally or escalated from partners.
• Undertake hypothesis-driven hunts across Huntress telemetry, prioritizing techniques that evade high-fidelity detections and initial SOC review.
• Translate threat intelligence into new or refined detections through Git workflows.
• Build and refine hunting dashboards or queries to surface intrusions.
• Review ambiguous attacker activity and surface likely intrusions for deeper investigation.
• Prepare incident reports with actionable guidance for partners.
• Create Huntress content (blogs, social posts, videos, podcasts, webinars).
• Use AI-assisted workflows to prototype queries and enrich analysis, embedding AI in core workflows.

Conocimientos

Detection engineering

Threat hunting

SOC operations

Incident response

Sigma

Suricata

Snort

YARA

KQL

EQL

Splunk SPL

Windows internals

Herramientas

OSQuery

Velociraptor

EZ Tools

RegRipper

Hayabusa

Descripción del empleo

Huntress Labs in a remote setup is seeking a Senior Detection Engineering and Threat Hunting Analyst to join a 24/7 SOC ecosystem. You will design and deploy scalable detections, hunt across massive telemetry, and collaborate with multiple teams to disrupt attacker activity.

You will also translate threat intel into production-ready detections and contribute to community-driven content. The role emphasizes developing high-fidelity detections, minimizing false positives, and operating within a