Security Operations Analyst

You're a hands-on SOC Analyst who thrives on detecting and responding to cybercrime. You'll triage Active Hands-On Keyboard intrusions, track attackers through networks, and help remove them before they achieve their objectives. You'll contextualise endpoint telemetry, analyse logs, leverage forensic artifacts, and understand malware to uncover the full scope of an intrusion.

Responsibilities

Triage, investigate, respond to, and remediate alerts generated by the Huntress platform; Review EDR/SIEM telemetry, log sources, and forensic artifacts to determine root cause of attacks and provide remediation; Perform dynamic analysis of malware to extract indicators of compromise or determine a file's malicious intent; Contribute to and refine detection capabilities and queue hygiene through crafting and tuning signals; Investigate activity in Microsoft 365 and Google Workspace and deliver remediation advice for compromised tenants; Continue growing skills through real-world intrusion data, paid training, and responsible use of AI tools; Support customer success by assisting the SOC Support team with threat-related escalations; Partner with Product and Engineering Teams to evolve Human Led Agentic workflows

Requirements

2+ years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles; Demonstrated experience with at least one of Windows, Linux, or macOS, including attack surfaces, malware analysis, and basic threat actor tools and techniques; Understanding of common system administration skills and how threat actors abuse them, including Active Directory, PowerShell, Group Policy, and local account creation; Familiarity with MITRE ATT&CK techniques and tactics, including credential dumping, lateral movement, persistence mechanisms, and exfiltration; Working knowledge of core networking concepts, including common ports and protocols, NAT, public and private IP addresses, and VLANs; Passion for forensics and digging into logs, processes, and artifacts; Clear written and verbal communication, and ability to simplify complex technical findings for diverse audiences; Self-guided learning; Use of AI tools to work faster in security analysis, with validation of outputs before acting on them

Benefits

Fully remote work; At least one annual trip to the US for Summer Summit, with additional local events in Australia; New starter home office set up reimbursement ($800 AUD); 12 weeks paid parental leave for primary and secondary carers; Monthly digital allowance for personal phone and internet costs ($185 AUD); Monthly home office tech stipend to upgrade or replace equipment ($40 AUD); Subsidised private health insurance through preferred provider; Stock options for all full-time employees; Access to the BetterUp platform for coaching and growth