Security Operations Analyst

Anduril's Detection and Response team is looking for a Security Operations Analyst to monitor and respond to adversarial activity. As a SecOps Analyst, you'll be responsible for triaging and responding to alerts and incidents, building and optimizing detection signatures, and participating in threat modeling scenarios.

Responsibilities:

• Triage and respond to alerts/incidents covering multiple disciplines
• Build and optimize tailored detection signatures, response playbooks, and response automation
• Lead the feedback loop for detections, ensuring alerts are fine-tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations

Required Qualifications:

• Experience in security monitoring, log analysis, and detection engineering
• Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations
• Experience with one or more SIEM languages (SPL, KQL, SQL)
• Experience conducting analysis in a data lake environment
• Broad range of practical security knowledge across endpoint, network, identity, application, and cloud infrastructure
• Knowledge of attacker tactics, techniques, and procedures (TTPs)
• Strong communication skills and experience collaborating with internal and external stakeholders
• Must be able to obtain and hold a U.S. Top Secret security clearance

Preferred Qualifications:

• Experience conducting incident response in the Cloud (AWS, Azure, GCP)
• Digital Forensics and/or reverse engineering experience

Benefits:

• Competitive salary range: $129,000-$171,000 USD
• Comprehensive benefits package, including equity grants and top-tier benefits