Security Operations Analyst

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology.

As a Security Operations Analyst on Anduril's Detection and Response team, you will monitor and respond to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team.

Responsibilities

• Triage and respond to alerts/incidents covering multiple disciplines including phishing, endpoints, cloud infrastructure and services, and SaaS applications.
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles.
• Lead the feedback loop for detections, ensuring alerts are fine-tuned to reduce false positives.
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments.
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data.
• Participate in an on-call rotation responding to security events and conducting incident response investigations.
• Proactively collaborate with stakeholders, guiding detection and response maturity, leading incidents, and mentoring junior analysts.

Required Qualifications

• Experience in security monitoring, log analysis, and detection engineering within large data sets.
• Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations.
• Experience with one or more SIEM languages (SPL, KQL, SQL).
• Experience conducting analysis in a data lake environment.
• Broad range of practical security knowledge across endpoint, network, identity, application, and cloud infrastructure.
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure.
• Strong communication skills and experience collaborating with internal and external stakeholders.
• Must be able to obtain and hold a U.S. Top Secret security clearance.

Preferred Qualifications

• Experience conducting incident response in the Cloud (AWS, Azure, GCP).
• Digital Forensics and/or reverse engineering experience.

Benefits

Anduril offers top-tier benefits for full-time employees, including a comprehensive, competitive benefits package.