Description
Anduril's Detection and Response team is looking for a Security Operations Analyst to monitor and respond to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team.
As a SecOps Analyst on the detection and response team, you'll be responsible for triaging and responding to alerts and incidents covering multiple disciplines, including phishing, endpoints, cloud infrastructure and services, and SaaS applications.
Key responsibilities:
- Triage and respond to alerts/incidents across multiple disciplines
- Build and optimize detection signatures, response playbooks, and response automation using detection-as-code principles
- Lead the feedback loop for detections, fine-tuning alerts to reduce false positives
- Participate in threat modeling scenarios with cross-functional partners
- Conduct threat hunting and data baselines to identify anomalous patterns in data
- Participate in on-call rotation responding to security events and conducting incident response investigations
- Collaborate with stakeholders, guiding detection and response maturity, leading incidents, and mentoring junior analysts.
The ideal candidate will have experience in security monitoring, log analysis, and detection engineering within large data sets, Python development, and experience with one or more SIEM languages.
Benefits include a comprehensive benefits package, highly competitive equity grants, and top-tier benefits for full-time employees.
The salary range for this role is $129,000-$171,000 USD per year.