Staff CSIRT Analyst (Fully Remote)

Huntress; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Huntress, a remote-first cybersecurity company founded by former NSA operators, is seeking an experienced security operations professional to join its 24/7 human-led SOC. You will lead incident response, coordinate with engineering, and drive scalable playbooks and reports.

This role emphasizes proactive preparedness, purple teaming, and continuous improvement to reduce mean time to detect and respond across millions of identities and endpoints.

Responsibilities

• Lead incident identification, triage, and validation as the SOC escalation point.
• Manage the full incident response lifecycle with milestones and blockers.
• Design table-top exercises and purple teaming for organizational readiness.
• Tune telemetry with engineering to achieve high true-positive rates.
• Collaborate with Offensive Security to close visibility gaps against threats.
• Own post-incident reviews and remediation for tooling and processes.
• Develop stakeholder reports and lessons learned after major incidents.
• Maintain playbooks, configurations, and IR standards at scale.

Job description

• Lead identification, triage, and validation of security incidents as the ultimate SOC escalation point.
• Manage the full incident response lifecycle with clear milestones and proactive blocker anticipation.

Strategic Preparedness & Telemetry:

• Design and execute tabletop exercises and purple teaming to ensure organizational readiness.
• Partner with engineering and detection teams to tune telemetry for high true-positive rates.

Offensive Security & Continuous Improvement:

• Collaborate with Offensive Security to close visibility gaps against modern threat actor TTPs.
• Own post-incident reviews and drive remediation tasks for tooling and process enhancements.

Communication & Documentation:

• Develop stakeholder-ready reports and lessons learned after major incidents.
• Maintain playbooks, system configurations, and incident response standards for scalability.

Huntress is a remote-first cybersecurity company founded by former NSA operators in 2015, providing enterprise-grade protection to all businesses. It secures over 6 million endpoints and 16 million identities, backed by a 24/7 human-led SOC and an inclusive culture.