Security Operations Analyst- Ireland

Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth.

Responsibilities

Triage, investigate, and respond to alerts from the Huntress platform; Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat; Perform tactical malware analysis as part of investigating and triaging alerts; Investigate suspicious Microsoft M365 activity and provide remediations; Assist in escalations from the Product Support team for threat-related and SOC-relevant questions; Contribute to detection engineering creation and tuning efforts; Contribute to projects focused on driving better outcomes for our analysts and partners; Contribute to our collaboratively mentored team (we're all here to make each other better!)

Requirements

2+ years experience in a SOC or Digital Forensics (DFIR) role; Demonstrated experience with Windows, Linux, and MacOS as an attack surface; Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs); Demonstrated experience with static and dynamic malware analysis concepts; Working knowledge of Windows Administration or Enterprise Domain Administration; Active Directory, Group Policy, Domain Trusts, etc.; Working knowledge of core networking concepts; Common ports/protocols, NAT, Public/Private IPs, VLANs, etc.; Working knowledge of web technologies and concepts; Web servers/applications, OWASP top 10, etc.; Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments; Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes; A strong sense of curiosity and a genuine excitement for learning

Nice to have

Previous experience in an MSP/MSSP/MDR role; Linux and MacOS investigative experience; Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby); Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc.; Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc.; Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc.; Familiarity with MSP tools such as RMMs

Benefits

Bonus; Equity; 100% remote work environment; New starter home office set up reimbursement (£398); Generous personal leave entitlements; Digital monthly reimbursement (£92); Travel to the US 1-2 times/year for various company events; Pension; Access to the BetterUp platform for coaching, personal, and professional growth