# Security Operations Analyst

**Company**: Anduril Industries
**Location**: Washington, District of Columbia
**Experience**: senior
**Job type**: full-time
**Salary**: $129,000-$171,000 USD
**Category**: IT
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/andurilindustries/jobs/5218589007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_5a18d9d2-710

## Description

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology.

As a Security Operations Analyst on Anduril's Detection and Response team, you will monitor and respond to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team.

## Responsibilities

- Triage and respond to alerts/incidents covering multiple disciplines including phishing, endpoints, cloud infrastructure and services, and SaaS applications.

- Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles.

- Lead the feedback loop for detections, ensuring alerts are fine-tuned to reduce false positives.

- Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments.

- Organize and conduct threat hunting and data baselines to identify anomalous patterns in data.

- Participate in an on-call rotation responding to security events and conducting incident response investigations.

- Proactively collaborate with stakeholders, guiding detection and response maturity, leading incidents, and mentoring junior analysts.

## Required Qualifications

- Experience in security monitoring, log analysis, and detection engineering within large data sets.

- Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations.

- Experience with one or more SIEM languages (SPL, KQL, SQL).

- Experience conducting analysis in a data lake environment.

- Broad range of practical security knowledge across endpoint, network, identity, application, and cloud infrastructure.

- Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure.

- Strong communication skills and experience collaborating with internal and external stakeholders.

- Must be able to obtain and hold a U.S. Top Secret security clearance.

## Preferred Qualifications

- Experience conducting incident response in the Cloud (AWS, Azure, GCP).

- Digital Forensics and/or reverse engineering experience.

## Benefits

Anduril offers top-tier benefits for full-time employees, including a comprehensive, competitive benefits package.

## Skills

### Required
- Python
- SIEM languages (SPL, KQL, SQL)
- security monitoring
- log analysis
- detection engineering
- data lake environment
- cloud infrastructure
- endpoint security
- network security

### Nice to have
- incident response in the Cloud (AWS, Azure, GCP)
- Digital Forensics
- reverse engineering

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/andurilindustries/jobs/5218589007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)