Security Operations Analyst (West Coast Shift)

Join Huntress, a mission-driven company dedicated to protecting businesses from cyberattacks. As a Security Operations Center Analyst, you will triage, investigate, respond to, and remediate various intrusions daily. You will have opportunities to enhance your skills and accelerate your career growth. The position is remote, offers a competitive salary, and includes a comprehensive benefits package.

• Triage, investigate, and respond to alerts coming in from the Huntress platform, performing tactical reviews of EDR telemetry and forensic artifacts.
• Conduct malware analysis and investigate suspicious Microsoft M365 activity, providing remediations as needed.
• Contribute to detection engineering efforts, projects focused on driving better outcomes for analysts and partners, and collaboratively mentor team members.

• Common ports/protocols, NAT, Public/Private IPs, VLANs, etc
• Working knowledge of Windows Administration or Enterprise Domain Administration
• A strong sense of curiosity and a genuine excitement for learning
• Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes
• Demonstrated experience with Windows, Linux, and MacOS as an attack surface
• Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
• Web servers/applications, OWASP top 10, etc
• Working knowledge of web technologies and concepts
• Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments
• Active Directory, Group Policy, Domain Trusts, etc
• Working knowledge of core networking concepts
• Demonstrated experience with static and dynamic malware analysis concepts
• Previous experience in an MSP/MSSP/MDR role
• Linux and MacOS investigative experience
• Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc
• Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
• Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc
• Familiarity with MSP tools such as RMMs
• Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc
• 4+ years of experience in a SOC or Digital Forensics (DFIR) role