Huntress Offices

Manages a regional Security Operations Center supporting 24/7 incident investigation and response. Responsibilities include optimizing processes, workflows, playbooks, shift coverage, quality assurance, analyst development, training, cross-functional coordination, and operational metrics. The role provides technical leadership, supports detection and response initiatives, partners with Product and Support teams, operationalizes new services, and represents the organization in public speaking engagements.

Investigate and respond to cybersecurity alerts, intrusions, malware, and compromised cloud tenants. Analyze EDR/SIEM telemetry, logs, forensic artifacts, and network activity; perform malware analysis; develop and tune detections; provide remediation guidance; and support customer escalations. The analyst will collaborate with Product and Engineering, contribute to incident response and threat hunting, and communicate findings clearly to varied audiences.

Develop and maintain high-fidelity detections across identity, endpoint, SIEM, and operating-system environments. Conduct hypothesis-driven threat hunts across large-scale telemetry, translate threat intelligence and investigations into detection rules, tune detection efficacy, investigate ambiguous attacker activity, and escalate likely intrusions with clear incident reports. The role also involves building hunting queries and dashboards, contributing to security content, and validating AI-assisted analysis and detection workflows.