SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Huntress, founded by former NSA cyber operators, is a remote-first cybersecurity company protecting over 5M endpoints and 11M identities worldwide. The company operates a 24/7 global Security Operations Center (SOC) staffed by security analysts who investigate and respond to incidents across millions of endpoints.
This Manager role reports to the Senior Manager of SOC and is based remotely in Australia, covering standard business hours (6:00 AM – 4:00 PM AWST, Monday–Friday) with occasional weekend support as needed.
Key responsibilities include designing and implementing processes, workflows, and playbooks to reduce analyst burnout and increase productivity while meeting global Service Level Objectives. You will manage shift coverage to maintain 24/7 operations, conduct weekly 1:1s with analysts to provide feedback and enable career growth, and contribute to developing training programs in Digital Forensics, Incident Response, Malware Analysis, Detection Engineering, Threat Hunting, and Automation.
You'll collaborate with Product teams to prioritize capabilities that augment analyst effectiveness, maintain quality assurance for your region, and work with Support to streamline partner and customer request workflows. The role includes providing technical leadership to SOC analysts, ensuring team alignment with Huntress' mission, and reporting on OKRs linked to SOC initiatives. You'll also help operationalize new technologies and services, participate in public speaking engagements, and serve as a key stakeholder advisor to Marketing, Sales, Support, and Product teams.
Required experience includes 5+ years as a Security Analyst in a global 24x7 SOC with Windows forensics focus, plus 2+ years in a team lead or managerial role within an MSSP, MDR provider, or Incident Response service. You should have demonstrated experience leading diverse cybersecurity teams across multiple disciplines, active engagement in the security community, and a commitment to staying current on threat actor tradecraft and detection techniques.
