Senior Detection Engineering & Threat Hunting Analyst

New

HuntressCybersecurity

Remote AustraliaFull-TimeSenior

Salary$150,000 to $170,000 AUD base plus bonus and equity

Apply NowOpens the employer's application page

Job Details

Experience: 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response.
Required Skills: AzureLinuxGoogle Workspace

Have 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response.
Have intermediate knowledge of Windows internals.
Have working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace.
Have experience developing, testing, tuning, and documenting detections or analytics from threat intelligence, IOCs, hypotheses, or real-world investigations.
Be able to communicate findings through clear written reports.
Have strong familiarity with detection languages such as Sigma, Suricata, Snort, or YARA.
Have familiarity with query languages such as KQL, EQL, ES|QL, or Splunk SPL.
Understand adversary tradecraft, including persistence, privilege escalation, defense impairment, lateral movement, discovery, and collection.
Understand different threat actor roles and associated goals, including initial access brokers, ransomware affiliates, and state-sponsored entities.
Be able to orchestrate reusable AI workflows for threat hunting, detection development, or analysis and verify AI-generated outputs before production.

Create, test, monitor, tune, promote, or retire detection rules based on their performance.
Develop rules across Huntress products and operating systems, including ITDR, SIEM, EDR, Windows, Linux, and macOS.
Manage DE&TH requests raised internally or escalated from partners.
Conduct hypothesis-driven hunts across Huntress telemetry, prioritizing techniques that may evade detections and initial SOC review.
Translate threat intelligence, IOCs, TTPs, and internal findings into new or refined detections through Git-based workflows.
Build and refine hunting dashboards or queries to surface potential intrusions.
Review ambiguous signs of attacker activity and investigate or escalate likely intrusions.
Help ensure partners receive clear incident reports with accurate advice.
Contribute findings to community-driven projects and create Huntress content, including blogs, social posts, videos, podcasts, and webinars.
Use AI-assisted workflows to prototype queries, enrich analysis, and develop detection-rule scaffolding; validate AI output.

View Full Description & ApplyYou'll be redirected to the employer's site