Security Operations Analyst - Huntress

About Huntress

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). Huntress now secures more than 6M endpoints and 16M identities worldwide.

Role Overview

• Position: Security Operations Analyst
• Reports To: Senior Manager, Security Operations Center
• Schedule: Perth time (AWST), Monday to Friday, 8:00 am to 4:00 pm (or local Australia time equivalent)
• Compensation: $110,000 to $140,000 AUD base plus bonus and equity

As a hands-on SOC Analyst, you will detect and respond to cybercrime, triage Active Hands-On Keyboard intrusions, track attackers through networks, and help remove them before they achieve their objectives. You’ll contextualise endpoint telemetry, analyse logs, leverage forensic artifacts, and understand malware to uncover the full scope of an intrusion.

Alongside alert triage and intrusion response, you’ll support sales, collaborate with Product to shape Huntress’ MDR service and platform, and have opportunities to contribute across Incident Response, Security Operations, Threat Hunting, and Detection Engineering.

Responsibilities

• Triage, investigate, respond to, and remediate alerts generated by the Huntress platform.
• Review EDR/SIEM telemetry, log sources, and forensic artifacts to determine root cause and provide necessary remediation.
• Perform dynamic analysis of malware when required to extract indicators of compromise or determine malicious intent.
• Contribute to and refine detection capabilities and queue hygiene through crafting and tuning signals.
• Investigate activity in Microsoft 365 and Google Workspace and deliver actionable remediation advice for compromised tenants.
• Continue to grow your skills through real-world intrusion data, paid training opportunities, and responsible use of AI tools.
• Support customer success by assisting the SOC Support team with escalations related to threat-related questions.
• Partner with Product and Engineering teams to continue evolving human-led agentic workflows.

What You Bring

• 2+ years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles.
• Demonstrated experience with Windows, Linux, or macOS attack surfaces, malware analysis, and threat actor tools and techniques.
• Familiarity with Active Directory, PowerShell, Group Policy, and local account creation techniques.
• Solid understanding of MITRE ATT&CK tactics (credential dumping, lateral movement, persistence, exfiltration).
• Working knowledge of core networking concepts (ports, protocols, NAT, IP addresses, VLANs).
• Strong passion for forensics, log analysis, and artifact investigation.
• Clear written and verbal communication skills with the ability to simplify complex technical concepts.
• Effective, responsible use of AI tools for day-to-day security analysis.

What We Offer

• Fully remote work environment.
• Annual trip to the US for Summer Summit, plus local Australian offsites and events.
• New starter home office setup reimbursement ($800 AUD).
• Monthly digital allowance for personal phone and internet costs ($185 AUD).
• Monthly home office tech stipend to upgrade or replace equipment ($40 AUD).
• 12 weeks paid parental leave for both primary and secondary carers.
• Subsidised private health insurance through preferred provider.
• Stock options for all full-time employees.
• Access to BetterUp platform for coaching and professional growth.