Security Operations Analyst

Hands-on SOC Analyst role focused on detecting and responding to cybercrime, triaging active hands-on-keyboard intrusions, tracking attackers through networks, and removing them before they achieve their objectives. Works within Huntress's 24/7 human-led Security Operations Center. Reports to Senior Manager, Security Operations Center. Follows Perth time (AWST), Monday to Friday, 8:00 am to 4:00 pm; applicants elsewhere in Australia are welcome if able to work these hours in their local time.

Responsibilities

Triage, investigate, respond to, and remediate alerts generated by the Huntress platform; Review EDR/SIEM telemetry, log sources, and forensic artifacts to determine root cause of attacks and provide remediation; Perform dynamic analysis of malware to extract indicators of compromise or determine a file's malicious intent; Contribute to and refine detection capabilities and queue hygiene through crafting and tuning signals; Investigate activity in Microsoft 365 and Google Workspace and deliver remediation advice for compromised tenants; Continue growing skills through real-world intrusion data, paid training, and responsible use of AI tools; Support customer success by assisting the SOC Support team with threat-related escalations; Partner with Product and Engineering Teams to evolve Human Led Agentic workflows

Requirements

2+ years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles; Demonstrated experience with at least one of Windows, Linux, or macOS, including attack surfaces, malware analysis, and basic threat actor tools and techniques; Understanding of common system administration skills and how threat actors abuse them, including Active Directory, PowerShell, Group Policy, and local account creation; Familiarity with MITRE ATT&CK techniques and tactics, including credential dumping, lateral movement, persistence mechanisms, and exfiltration; Working knowledge of core networking concepts, including common ports and protocols, NAT, public and private IP addresses, and VLANs; Passion for forensics and digging into logs, processes, and artifacts; Clear written and verbal communication, simplifying complex technical findings for diverse audiences, and self-guided learning; Using AI to work faster in security analysis while applying sound judgment and validating its output; Team-player mindset

Benefits

Fully remote work; At least one annual trip to the US for Summer Summit, with additional local events in Australia; New starter home office set up reimbursement ($800 AUD); 12 weeks paid parental leave for primary and secondary carers; Monthly digital allowance for personal phone and internet costs ($185 AUD); Monthly home office tech stipend to upgrade or replace equipment ($40 AUD); Subsidised private health insurance through preferred provider; Stock options for all full-time employees; Access to the BetterUp platform for coaching and growth