SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Huntress is seeking a Security Operations Analyst to join its 24/7 Security Operations Center (SOC). Founded in 2015 by former NSA cyber operators, Huntress provides enterprise-grade cybersecurity to businesses of all sizes, currently protecting over 5M endpoints and 14M identities worldwide.
In this hands-on role, you will triage and respond to active intrusions, track attackers through networks, and work to remove threats before they achieve their objectives. You'll analyze endpoint telemetry, logs, and forensic artifacts to understand the full scope of intrusions and deliver actionable remediation to customers.
Key responsibilities include:
- Triaging, investigating, and remediating alerts from the Huntress platform
- Reviewing EDR/SIEM telemetry and forensic artifacts to determine attack root causes
- Performing dynamic malware analysis to extract indicators of compromise
- Contributing to detection capabilities and signal tuning for emerging threats
- Investigating compromised Microsoft 365 and Google Workspace tenants
- Supporting customer success through escalation assistance
- Collaborating with Product and Engineering teams on human-led agentic workflows
You bring 2+ years of SOC, Incident Response, MDR, or Digital Forensics experience. You have demonstrated knowledge of Windows, Linux, or macOS attack surfaces, malware analysis, and threat actor techniques. You understand system administration abuse vectors (Active Directory, PowerShell, Group Policy), MITRE ATT&CK tactics, and core networking concepts. You're passionate about forensics, communicate clearly to diverse audiences, and use AI thoughtfully to accelerate analysis while validating outputs. You thrive under pressure, take ownership of investigations, and bring a collaborative, team-player mindset.
