Security Operations Analyst

• Triage, investigate, respond to, and remediate alerts generated by the Huntress platform.
• Review EDR/SIEM telemetry, log sources, and forensic artifacts to determine attack root causes and provide remediation.
• Perform dynamic malware analysis to extract indicators of compromise or determine malicious intent.
• Craft and tune detection signals to address emerging threats and improve queue hygiene.
• Investigate activity in Microsoft 365 and Google Workspace and provide remediation advice for compromised tenants.
• Develop skills through real-world intrusion data, paid training, and responsible use of AI tools for research and routine analysis.
• Support customer success by assisting with customer and partner escalations involving threat-related and SOC-relevant questions.
• Partner with Product and Engineering to evolve Human Led Agentic workflows.
• Support sales and collaborate with Product on Huntress’ MDR service and platform.
• Contribute across Incident Response, Security Operations, Threat Hunting, and Detection Engineering.
• Share work through blogs, conference talks, webinars, and research publications.

• 2+ years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles.
• Demonstrated experience with at least one of Windows, Linux, or macOS, including attack surfaces, malware analysis, and basic threat actor tools and techniques.
• Understanding of common system administration skills and how threat actors abuse them, including Active Directory, PowerShell, Group Policy, and local account creation.
• Familiarity with MITRE ATT&CK techniques and tactics, including credential dumping, lateral movement, persistence mechanisms, and exfiltration techniques.
• Working knowledge of core networking concepts, including common ports and protocols, NAT, public and private IP addresses, and VLANs.
• Passion for forensics and experience digging into logs, processes, and artifacts to understand intrusions.
• Clear written and verbal communication skills, ability to simplify complex technical findings for diverse audiences, and self-guided learning.
• Ability to use AI in day-to-day security analysis, validate its output, and apply sound judgment.
• Ability to work Perth time (AWST), Monday to Friday, 8:00 am to 4:00 pm, or equivalent local hours elsewhere in Australia.

• Fully remote work
• At least one annual trip to the US for Summer Summit, with additional local events in Australia!
• New starter home office set up reimbursement ($800 AUD)
• 12 weeks paid parental leave for both primary and secondary carers
• Monthly digital allowance for personal phone and internet costs ($185 AUD)
• Monthly home office tech stipend to upgrade or replace equipment ($40 AUD)
• Subsidised private health insurance through our preferred provider
• Stock options for all full-time employees
• Access to the BetterUp platform for coaching, personal, and professional growth