Security Operations Analyst - Huntress

About Huntress

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC).

Huntress now secures more than 5M endpoints and 14M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence.

What You'll Do

You’re a hands-on SOC Analyst who thrives on detecting and responding to cybercrime. You’ll triage Active Hands-On Keyboard intrusions, track attackers through networks, and help remove them before they achieve their objectives. You’ll contextualise endpoint telemetry, analyse logs, leverage forensic artifacts, and understand malware to uncover the full scope of an intrusion.

Alongside alert triage and intrusion response, you’ll support sales, collaborate with Product to shape Huntress’ MDR service and platform, and have opportunities to contribute across Incident Response, Security Operations, Threat Hunting, and Detection Engineering.

Shifts & Availability

You’ll need to be available to work one of the following shifts:

• Western Australia: Monday to Friday, 8:00 am - 4:00 pm AWST
• East Coast: Monday to Friday, 9:00 am - 5:00 pm AEST
• East Coast: Tuesday to Friday, 8:00 am - 6:00 pm AEST

Responsibilities

• Triage, investigate, respond to, and remediate alerts generated by the Huntress platform.
• Review EDR/SIEM telemetry, log sources, and forensic artifacts to determine the root cause of attacks and provide remediation.
• Perform dynamic analysis of malware when required to extract indicators of compromise or determine malicious intent.
• Contribute to and refine detection capabilities and queue hygiene through crafting and tuning signals.
• Investigate activity in Microsoft 365 and Google Workspace and deliver actionable remediation advice for compromised tenants.
• Continuously expand your skills using real-world intrusion data, paid training opportunities, and responsible AI tools.
• Support customer success by assisting the SOC Support team with escalations related to threat and SOC questions.
• Partner with Product and Engineering Teams to help evolve human-led agentic workflows.

What You Bring To The Team

• Experience: 2+ years of experience in SOC, Incident Response, Managed Detection and Response (MDR), or Digital Forensics roles.
• OS & Admin Knowledge: Experience with Windows, Linux, or macOS attack surfaces, malware analysis, and administrative tools (Active Directory, PowerShell, Group Policy, local account creation).
• Threat Frameworks: Familiarity with MITRE ATT&CK techniques (credential dumping, lateral movement, persistence, exfiltration).
• Networking & Forensics: Working knowledge of core networking (ports, protocols, NAT, VLANs) and a passion for digging into logs and artifacts.
• Communication: Ability to clearly communicate technical findings in writing and verbally for diverse audiences.
• Modern Tools: Practical experience using AI to accelerate day-to-day security analysis while critically validating outputs.

What We Offer

• Fully remote work environment
• Base salary range: $110,000 to $140,000 AUD plus bonus and equity
• Stock options for all full-time employees
• At least one annual trip to the US for Summer Summit, plus local Australian offsites
• New starter home office set up reimbursement ($800 AUD)
• Monthly home office tech stipend ($40 AUD) and monthly digital allowance for phone/internet ($185 AUD)
• Subsidised private health insurance through a preferred provider
• 12 weeks paid parental leave for primary and secondary carers
• Access to BetterUp coaching and professional growth platform