Description
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organisations.
Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. Founded in 2015 by former NSA cyber operators, we build our technology in-house and back it with a 24/7 human-led Security Operations Centre (SOC).
As a Security Operations Centre Analyst, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis.
Responsibilities:
- Triage, investigate, and respond to alerts from the Huntress platform
- Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat
- Perform tactical malware analysis as part of investigating and triaging alerts
- Investigate suspicious Microsoft M365 activity and provide remediations
- Assist in escalations from the Product Support team for threat-related and SOC-relevant questions
- Contribute to detection engineering creation and tuning efforts
- Contribute to projects focused on driving better outcomes for our analysts and partners
- Contribute to our collaboratively mentored team
What You Bring To The Team:
- 2+ years experience in a SOC or Digital Forensics (DFIR) role
- Demonstrated experience with Windows, Linux, and MacOS as an attack surface
- Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
- Demonstrated experience with static and dynamic malware analysis concepts
- Working knowledge of Windows Administration or Enterprise Domain Administration
- Active Directory, Group Policy, Domain Trusts, etc.
- Working knowledge of core networking concepts
- Common ports/protocols, NAT, Public/Private IPs, VLANs, etc.
- Working knowledge of web technologies and concepts
- Web servers/applications, OWASP top 10, etc.
- Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments
- Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes
- A strong sense of curiosity and a genuine excitement for learning
What We Offer:
- 100% remote work environment
- New starter home office set-up allowance (€480)
- Generous personal leave entitlements
- Digital monthly reimbursement (€111)
- Travel to the US 1-2 times/year for various company events
- Pension
- Access to the BetterUp platform for coaching, personal, and professional growth