Security Operations Analyst (Ireland)

• Reports to: Manager, Security Operations Center
• Huntress is looking for a Security Operations Center Analyst to add to our growing team
• In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis
• You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth
• The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors
• You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild
• If you’re looking to accelerate your career and skills, this is the team for you!
• Triage, investigate, and respond to alerts from the Huntress platform
• Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat
• Perform tactical malware analysis as part of investigating and triaging alerts
• Investigate suspicious Microsoft M365 activity and provide remediations
• Assist in escalations from the Product Support team for threat-related and SOC-relevant questions
• Contribute to detection engineering creation and tuning efforts
• Contribute to projects focused on driving better outcomes for our analysts and partners
• Contribute to our collaboratively mentored team (we’re all here to make each other better!)

Benefits

• 401K Match: We offer a 5% contribution to your 401k – even if you’re not paying into it yourself.
• Health Benefits: Medical, dental, vision, life & disability insurance, pet insurance, and other benefits you’d expect from a company that cares about its team members.
• 100% Remote: We’ve been a remote team from day one – and we’ve got the tools, systems and processes to be successful outside of a corporate office or HQ.
• PTO & Other Leave: We offer 12 weeks of paid parental leave, along with vacation, sick time, bereavement leave, and floating holidays.
• Pension: We offer a competitive employer contribution to your pension.
• Growth Opportunities: We’re committed to teammate development, both within and outside of Huntress – including education assistance programs like LifeLabs, hands-on training, coaching through BetterUp, and more.
• Health Benefits: Huntress will provide a competitive contribution to put towards a healthcare plan of your choice.
• Stock Options: All full-time teammates receive stock options and benefit from the continued growth and success of the company.
• Digital Monthly Reimbursements: We offer a monthly digital reimbursement for your internet and phone – plus a new starter home office reimbursement.
• Pension: We offer a 5% contribution to your Pension – even if you’re not paying into it yourself.
• Health Benefits: Medical, dental, vision, and other benefits you’d expect from a company that cares about its team members.- Demonstrated experience with Windows, Linux, and MacOS as an attack surface
• Active Directory, Group Policy, Domain Trusts, etc
• Web servers/applications, OWASP top 10, etc
• Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments
• Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
• A strong sense of curiosity and a genuine excitement for learning
• Demonstrated experience with static and dynamic malware analysis concepts
• Working knowledge of Windows Administration or Enterprise Domain Administration
• Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes
• Working knowledge of web technologies and concepts
• Working knowledge of core networking concepts
• Common ports/protocols, NAT, Public/Private IPs, VLANs, etc
• 2+ years experience in a SOC or Digital Forensics (DFIR) role
• Previous experience in an MSP/MSSP/MDR role
• Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc
• Linux and MacOS investigative experience
• Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
• Familiarity with MSP tools such as RMMs
• Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc
• Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc