Staff CSIRT Lead – Remote Incident Response

Huntress Labs; United States; Remote; USD 200,000 - 210,000; Full time

Benefits offered by this job

Remote work

PTO

Parental leave

Health benefits

401(k)

Stock options

Home office reimbursement

Education assistance

Coaching access

Job summary

Huntress Labs, a remote-first cybersecurity company, is seeking a Staff CSIRT Analyst to own internal incident response lifecycles. You will guide cross-functional teams, orchestrate end-to-end response efforts, and drive improvements to detection, readiness, and resilience across the organization.

You will collaborate with engineering, product security, and detection teams, lead post-incident reviews, and shape incident response playbooks and standards. Remote US, competitive compensation.

Qualifications

• 8+ years of experience in Incident Response, SOC Operations, or DFIR.
• Advanced knowledge of EDR/MDR platforms, SIEM/ELK, and cloud security (AWS/Azure/M365).
• Ability to articulate root causes and translate insights into technical solutions.
• Experience leading small project teams and aligning tech stacks.
• Exceptional communication to technical and executive audiences.
• Familiarity with automation/SOAR and documentation tools like Jira/Confluence/Lucidchart.
• A proactive, security-forward mindset focused on culture and accountability.

Responsibilities

• Incident Response & Triage: Lead detection and validation of security incidents for the SOC.
• Strategic Preparedness: Design and run tabletop exercises and purple teaming to boost readiness.
• Telemetry Optimization: Tune telemetry with engineering to improve true-positive rates.
• Offensive Security Collaboration: Work with Offensive Security to cover visibility gaps.
• Continuous Improvement & Leadership: Lead PIRs and drive remediation tooling and processes.
• Stakeholder Communication: Present lessons learned to stakeholders after incidents.
• Documentation: Create and maintain playbooks and incident response standards.

Skills

Incident Response

SOC Operations

Digital Forensics

EDR/MDR platforms

SIEM/ELK

Cloud security

Communication

Strategic Thinking

Leadership

Automation/SOAR

Tools

Jira

Confluence

Lucidchart

Job description

Huntress Labs, a remote-first cybersecurity company, is seeking a Staff CSIRT Analyst to own internal incident response lifecycles. You will guide cross-functional teams, orchestrate end-to-end response efforts, and drive improvements to detection, readiness, and resilience across the organization.

You will collaborate with engineering, product security, and detection teams, lead post-incident reviews, and shape incident response playbooks and standards. Remote US, competitive compensation.