Security Operations Analyst - Weekend 4x10 Shift

Huntress is a fully remote, global team of passionate experts and ethical badasses on a mission to break down the barriers to cybersecurity. Whether creating purpose-built security solutions, hunting down hackers, or impacting our community, our people go above and beyond to change the security game and make a real difference.

Founded in 2015 by former NSA cyber operators, Huntress protects all businesses—not just the 1%—with enterprise-grade, fully owned, and managed cybersecurity products at the price of an affordable SaaS application. The Huntress difference is our One Team advantage: our technology is designed with our industry-defining Security Operations Center (SOC) in mind and is never separated from our service.

We protect 4M+ endpoints and 7M+ identities worldwide, elevating underresourced IT teams with protection that works as hard as they do. As long as hackers keep hacking, Huntress keeps hunting.

Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyberattacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth.

• Triage, investigate, and respond to alerts coming in from the Huntress platform.
• Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks, where possible, and provide remediations needed to remove the threat.
• Perform tactical malware analysis as part of investigating and triaging alerts.
• Investigate suspicious Microsoft M365 activity and provide remediations.
• Assist in escalations from the Product Support team for threat-related and SOC-relevant questions.
• Contribute to detection engineering creation and tuning efforts.
• Contribute to projects focused on driving better outcomes for our analysts and partners
• Contribute to our collaboratively mentored team (we're all here to make each other better!).

• 2+ years of experience in a SOC or Digital Forensics (DFIR) role
• Demonstrated experience with Windows, Linux, and MacOS as an attack surface
• Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
• Demonstrated experience with static and dynamic malware analysis concepts
• Working knowledge of Windows Administration or Enterprise Domain Administration
• Active Directory, Group Policy, Domain Trusts, etc.
• Working knowledge of core networking concepts
• Common ports/protocols, NAT, Public/Private IPs, VLANs, etc.
• Working knowledge of web technologies and concepts 
• Web servers/applications, OWASP top 10, etc.
• Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments
• Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes
• A strong sense of curiosity and a genuine excitement for learning

• Previous experience in an MSP/MSSP/MDR role
• Linux and MacOS investigative experience 
• Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
• Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc. 
• Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc.
• Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc.
• Familiarity with MSP tools such as RMMs

• 100% remote work environment - since our founding in 2015
• Generous paid time off policy, including vacation, sick time, and paid holidays
• 12 weeks of paid parental leave
• Highly competitive and comprehensive medical, dental, and vision benefits plans 
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans
• Stock options for all full-time employees 
• One-time $500 reimbursement for building/upgrading home office
• Annual allowance for education and professional development assistance 
• $75 USD/month digital reimbursement
• Access to the BetterUp platform for coaching, personal, and professional growth