Security Operations Analyst

You’re a hands-on SOC Analyst who thrives on detecting and responding to cybercrime. You’ll triage Active Hands-On Keyboard intrusions, track attackers through networks, and help remove them before they achieve their objectives. You’ll contextualise endpoint telemetry, analyse logs, leverage forensic artifacts, and understand malware to uncover the full scope of an intrusion. Alongside alert triage and intrusion response, you’ll support sales, collaborate with Product to shape Huntress’ MDR service and platform, and have opportunities to contribute across Incident Response, Security Operations, Threat Hunting, and Detection Engineering. We’ll also support you in sharing your work through blogs, conference talks, webinars, and research publications that build your personal brand and the broader security community.

Responsibilities

Triage, investigate, respond to, and remediate alerts generated by the Huntress platform; Review EDR/SIEM telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide the remediation needed to remove the threat; Perform dynamic analysis of malware when required to extract indicators of compromise or determine a file’s malicious intent; Contribute to and refine detection capabilities and queue hygiene through crafting and tuning signals to address emerging threats; Investigate activity in Microsoft 365 and Google Workspace and deliver actionable remediation advice for compromised tenants; Continue to grow your skills and knowledge through real-world intrusion data, paid training opportunities, and responsible use of AI tools to support research, summarise findings, and accelerate routine analysis while validating outputs; Support customer success by assisting our SOC Support team with customer/partner escalations related to threat-related and SOC-relevant questions; Help through partnering with Product and Engineering Teams to continue to evolve Human Led Agentic workflows

Requirements

2+ years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles; demonstrated experience with at least one of Windows, Linux, or macOS, including attack surfaces, malware analysis, and basic threat actor tools and techniques; understanding of common system administration skills and how threat actors abuse them, including Active Directory, PowerShell, Group Policy, and local account creation; familiarity with the techniques and tactics in MITRE ATT&CK, including credential dumping, lateral movement, persistence mechanisms, and exfiltration techniques; working knowledge of core networking concepts, including common ports and protocols, NAT, public and private IP addresses, and VLANs; passion for forensics and enjoyment in digging into logs, processes, and artifacts; clear communication in writing and verbally, ability to simplify complex technical findings for diverse audiences, and self-guided learning; use of AI to work faster and smarter in day-to-day security analysis, applying sound judgment and validating output; team-player mindset and ability to deliver great outcomes with a smile, a laugh, and a dash of witty but accurate memes

Nice to have

Desire to hold your manager accountable for delivering ice cream at the Australian Security Offsite

Benefits

Fully remote work; At least one annual trip to the US for Summer Summit, with additional local events in Australia; New starter home office set up reimbursement ($800 AUD); 12 weeks paid parental leave for both primary and secondary carers; Monthly digital allowance for personal phone and internet costs ($185 AUD); Monthly home office tech stipend to upgrade or replace equipment ($40 AUD); Subsidised private health insurance through our preferred provider; Stock options for all full-time employees; Access to the BetterUp platform for coaching, personal, and professional growth