Security Operations Analyst

Overview

Join Huntress, a leading cybersecurity company founded by former NSA operators, dedicated to providing enterprise-grade cyber defense solutions remotely. Our team protects over 5 million endpoints and 14 million identities globally, combating daily cyber threats through innovative technology and a 24/7 human Security Operations Center (SOC).

Key Responsibilities

• Evaluate and respond to security alerts from the Huntress platform promptly.
• Conduct detailed examinations of EDR telemetry, logs, and forensic data to identify attack origins and propose remediation actions.
• Perform malware analyses to assist with alert investigations and threat triage.
• Investigate suspicious activities within Microsoft M365 and recommend corrective measures.
• Support the Product Support team by resolving escalated security and SOC-related inquiries.
• Participate in the development and refinement of detection engineering processes.
• Engage in projects aimed at enhancing analyst productivity and collaboration with partners.
• Contribute to a team culture of continuous learning and mentorship.

Required Qualifications and Skills

• Minimum two years of experience in Security Operations Center or Digital Forensics and Incident Response roles.
• Proficient understanding of Windows, Linux, and MacOS operating systems and their security attack surfaces.
• Knowledge of Threat Actor tools and techniques including MITRE ATT&CK framework, PowerShell, Windows command tools, lateral movement, persistence, and evasion strategies.
• Familiarity with static and dynamic malware analysis methodologies.
• Working experience with Windows or Enterprise Domain Administration, including Active Directory, Group Policies, and Domain Trusts.
• Understanding core networking concepts such as common protocols, NAT, IP addressing, and VLANs.
• Basic knowledge of web technologies, web servers, web applications, and OWASP top 10 vulnerabilities.
• Strong communication skills to clearly explain complex security issues to technical and non-technical audiences.
• Customer-oriented approach prioritizing client needs and concerns.
• Curiosity and passion for continuous learning in cybersecurity.

Preferred Attributes

• Experience working within Managed Service Providers (MSP), Managed Security Service Providers (MSSP), or Managed Detection and Response (MDR) environments.
• Advanced investigative experience with Linux and MacOS platforms.
• Proficiency in scripting languages such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby.
• Participation in cyber defense platforms and labs like HackTheBox, TryHackMe, or Blue Team Labs Online.
• Experience with cloud environment investigations involving Microsoft 365, Azure, AWS, or Google Cloud Platform.
• Engagement in cybersecurity competitions like Capture The Flag or Collegiate Cyber Defense Competitions.
• Familiarity with MSP tools such as Remote Monitoring and Management (RMM) systems.

Compensation and Perks

• Competitive base salary ranging from €70,000 to €90,000, with bonus and equity components included.
• Fully remote work set-up supported with a home office reimbursement of £398.
• Generous personal leave provisions.
• Monthly digital expense reimbursement of £92.
• Opportunity to travel to the United States 1-2 times annually for company events.
• Retirement pension plan participation.
• Access to the BetterUp coaching platform for personal and professional development.

Company Culture and Inclusivity

Huntress embraces diversity and fosters an inclusive workplace where every individual is valued and heard. We prohibit discrimination on all legally protected bases and expect commitment to ethical practices.

Accessibility

Reasonable accommodations are available upon request during application, interview, or hiring processes.

Use of AI in Recruitment

Our recruitment process involves responsible use of AI tools to assist with application reviews and candidate assessments, all decisions are ultimately made by human recruiters.