Security Operations Analyst
H
HuntressCybersecurity
Location: Remote Australia, Perth time (AWST), Monday to Friday, 8:00 am to 4:00 pmFull-TimeMiddle
Salary$110,000 to $140,000 AUD base plus bonus and equity
Apply NowOpens the employer's application page
Job Details
- Experience
- 2+ years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles.
- Required Skills
- Linux
Requirements
- Have 2+ years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles.
- Demonstrate experience with at least one of Windows, Linux, or macOS, including attack surfaces, malware analysis, and basic threat actor tools and techniques.
- Understand system administration skills and how threat actors abuse them, including Active Directory, PowerShell, Group Policy, and local account creation.
- Be familiar with MITRE ATT&CK techniques and tactics, including credential dumping, lateral movement, persistence, and exfiltration.
- Have working knowledge of networking concepts, including common ports and protocols, NAT, public and private IP addresses, and VLANs.
- Have an interest in forensics and analyzing logs, processes, and artifacts to understand intrusions.
- Communicate technical findings clearly in writing and verbally to diverse audiences.
- Apply sound judgment when using AI for security analysis and validate its output before acting on it.
Responsibilities
- Triage, investigate, respond to, and remediate alerts generated by the Huntress platform.
- Review EDR/SIEM telemetry, log sources, and forensic artifacts to determine attack root causes and provide remediation.
- Perform dynamic malware analysis to extract indicators of compromise or determine malicious intent.
- Craft and tune detection signals to address emerging threats and improve queue hygiene.
- Investigate Microsoft 365 and Google Workspace activity and provide remediation advice for compromised tenants.
- Use real-world intrusion data and AI tools to support research and routine analysis, validating AI outputs.
- Assist the SOC Support team with customer and partner escalations related to threats and SOC questions.
- Partner with Product and Engineering teams to evolve Human Led Agentic workflows.
View Full Description & ApplyYou'll be redirected to the employer's site
