Senior Detection Engineering & Threat Hunting Analyst

4 weeks, 1 day ago
Full-time
Senior
Cybersecurity
Huntress

Huntress

Huntress is a managed cybersecurity platform that protects small and mid-market businesses from cybercriminals. Their services include managed endpoint protection, detection and response, Microsoft 365 identity protection, and security awareness traini...

Professional Services
251-1K
Founded 2015
$160M raised

Description

  • Create, test, monitor, tune, promote, and retire detection rules throughout the detection lifecycle.
  • Develop detections across ITDR, SIEM, EDR, Windows, Linux, and macOS environments.
  • Manage internal and partner-escalated detection engineering and threat hunting requests.
  • Conduct hypothesis-driven hunts across Huntress telemetry to identify evasive attacker techniques.
  • Translate threat intelligence, IOCs, TTPs, and investigation findings into detections through Git-based workflows.
  • Build and refine hunting queries and dashboards to surface potential intrusions.
  • Review ambiguous attacker activity and investigate or escalate likely intrusions with clear incident reporting.
  • Contribute findings to community projects and create blogs, social posts, videos, podcasts, and webinars.
  • Use AI-assisted workflows to prototype queries, enrich analysis, and scaffold detection rules while validating outputs.

Requirements

  • 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response.
  • Intermediate knowledge of Windows internals.
  • Working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace.
  • Experience developing, testing, tuning, and documenting detections or analytics.
  • Ability to communicate findings through clear written reports.
  • Familiarity with Sigma, Suricata, Snort, or YARA and query languages such as KQL, EQL, ES|QL, or Splunk SPL.
  • Understanding of adversary tradecraft, including persistence, privilege escalation, defense impairment, lateral movement, discovery, and collection.
  • Understanding of threat actor roles and objectives, including initial access brokers, ransomware affiliates, and state-sponsored entities.
  • Ability to build reusable AI workflows and verify AI-generated outputs before production use.
  • Preferred: Linux and macOS internals, OSquery, Velociraptor, EDR/MDR/XDR platforms, forensic tools, and intermediate malware analysis skills.

Benefits

  • $150,000–$170,000 base salary plus bonus and equity.
  • 100% remote work environment.
  • Generous paid time off, including vacation, sick time, and holidays.
  • 12 weeks of paid parental leave.
  • Medical, dental, and vision insurance, plus life and disability coverage.
  • 401(k) with a 5% employer contribution regardless of employee contribution.
  • Stock options for all full-time employees.
  • Professional development support, BetterUp coaching, $500 home-office reimbursement, and $75 monthly digital reimbursement.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cyber Security Analyst I (Sunday - Thursday 9:30pm to 7:30am shift)

Tusker 251-1K Consumer Services

Tusker is hiring a Cyber Security Analyst I to monitor and protect client environments in a 24/7 managed security operations center while developing foundational cybersecurity experience.

Active Directory Cybersecurity
12 minutes ago

IT Security Analyst

Kairos Power 251-1K Electric Utilities

Kairos Power is hiring an IT Security Analyst II to protect and strengthen its multi-site hybrid IT environment through security operations, risk remediation, and compliance support for its advanced nuclear energy business.

Cybersecurity Encryption Network Security SIEM
12 minutes ago

Senior Information Security Internal Auditor

Everbridge 1K-5K Internet Software & Services

Everbridge is seeking a fully remote Senior Information Security Internal Auditor to manage security audit and compliance activities supporting its critical event management technology for enterprise and government customers.

CI/CD DevSecOps Terraform
1 day, 23 hours ago

Senior Security Analyst - Germany

Coalition 251-1K Insurance

Coalition is seeking a Senior Security Analyst in Germany to assess cyber risk, investigate incidents and claims, and turn technical findings into customer guidance and improvements to insurance products and internal security processes.

Cybersecurity HIPAA Network Security Penetration Testing TCP/IP
2 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers