Security Operations Analyst - West Coast Shift
Core
Triage, investigate, respond, and remediate intrusions and alerts from the Huntress platform, including malware analysis and M365 investigations.
Role type
Mid-level Security Operations Center (SOC) Analyst
Builds
Incident response outcomes and detection engineering improvements for enterprise customers
Domain
Cybersecurity / SOC Operations
Required skills
SOC or DFIR experience, Windows/Linux/MacOS attack surface knowledge, Threat Actor tools (MITRE ATT&CK, PowerShell, WMIC), static and dynamic malware analysis, Active Directory administration, core networking concepts, web technologies (OWASP)
Preferred skills
MSP/MSSP/MDR experience, Cloud investigation (M365, Azure, AWS, GCP), scripting (PowerShell, Python, Bash), CTF participation, RMM familiarity
Technologies
Huntress platform, EDR, Microsoft M365, Active Directory, PowerShell, Python, Bash, HackTheBox, TryHackMe, Azure, AWS, GCP
Responsibilities
Triage and investigate alerts from the Huntress platform; Perform tactical review of EDR telemetry and forensic artifacts; Perform tactical malware analysis; Investigate suspicious Microsoft M365 activity; Assist in escalations from Product Support; Contribute to detection engineering creation and tuning
Seniority
Mid-level, hands-on IC
