Senior Tactical Response Analyst, Huntress
West Coast
$145-165k
Plus bonus and equity
Managed cyber security platform
Be an early applicant
Managed cyber security platform
501-1000 employees
Be an early applicant
$145-165k
Plus bonus and equity
501-1000 employees
Company mission
To shatter the barriers to enterprise-level security.
Role
Who you are
- If you have a skillset in Incident Response, Threat Hunting, and/or Detection Engineering, and would thrive in the environment and energy of a SOC, this is the role for you!
- 3-5 years working in one or more of the following: SOC, MDR, Threat Hunting, or Incident Response roles
- Experience leading or participating in Incident Response engagements for external customers
- Experience with tools such as osquery, Velociraptor, or leveraging EDRs to perform forensic artifact analysis on systems
- Confident command of forensic tools - such as Ericzimmerman’s EZ tools, RegRipper, Hayabusa, or Chainsaw - and forensic artifacts - such as prefetch, jumplists, shellbags, and more
- Deep understanding of offensive security tradecraft, particularly persistence, lateral movement, credential theft, and remote access
- Confidently able to track threat actors across an organization and timeline the activity
- Strong familiarity with one or more detection languages such as Sigma, Suricata, Snort, or Yara
- Familiarity with OSINT sources and how they can help answer questions relating to threat actor activity and infrastructure
- Strong familiarity with various query languages such as KQL, EQL, ES|QL, Splunk SPL
- Intermediate malware analysis skills
- Intermediate knowledge of Windows internals
- Intermediate knowledge of Linux and macOS internals is a bonus
- Strong understanding of the current threat landscape, initial access brokers, and ransomware actors
- Passionate and involved with the community through blogs, social media, conferences, etc
- Experience with scripting (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
- Demonstrable experience providing written and/or verbal customer-facing deliverables
- Experience with detection and response in cloud environments such as Microsoft M365/Azure
- Comfortable using Git to contribute to internal projects
What the job involves
- Reports to: Senior Manager, Tactical Response
- The Huntress Tactical Response team has the unique honor of waking up every morning knowing we will be kicking out threat actors
- This team sits alongside our 24x7 Security Operations Center team
- It is a skilled team of individuals who review lower-confidence signals and manage tactical incident response scenarios to assist customers in exiting critical intrusions
- In the Response side of the role, you will have the opportunity to flex your incident response and forensics skills
- When customers are experiencing the worst incidents of their lives, this team will step in to answer questions core to understanding the cause of an attack, the high-level activities of the attacker once in the environment, and provide remediation actions and recommendations that will help reduce or eliminate this threat from occurring again in their environment
- In between cases, you will get to research new attacker tradecraft, test new theories, and query data at scale for millions of endpoints
- You'll lead or support tactical incident response engagements for customers who already utilize Huntress MDR. Perform live analysis on systems to determine the root cause of an intrusion, and craft reports that summarize the intrusion, with the next steps to be taken
- Research, develop, and test new tooling in the form of automations, scripts, and tools for analysis
- Perform intermediate malware analysis as part of response efforts
- Perform OSINT as part of response efforts
- Contribute to content creation efforts such as blogs, videos, podcasts, and webinars
- Contribute to community-driven projects and frameworks, such as MITRE ATT&CK, HijackLibs, and the LOLBAS Project
- Speak with customers to explain or summarize findings from investigations
Our take
In a world of increasingly sophisticated cyberthreats, many organizations lack the resources and expertise to defend themselves effectively. Huntress has stepped in to address this gap, delivering robust cybersecurity solutions to protect a wide range of businesses and institutions across the US business landscape.
The company offers a managed security platform, which third party resellers leverage to protect their clients from attacks. Launched in 2015, Huntress has grown well over the years, attracting plenty of investment and expanding its headcount into the hundreds.
More recently, Huntress has turned its eye to acquisitions and new product launches, as well as major international expansion. A considerable influx of funding will support these initiatives, as well as allow the company to maintain sales momentum by expanding its go-to-market efforts.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 6 rounds)
Jun 2024
$150m
SERIES D
May 2023
$60m
SERIES C
Total funding: $289.8m
Company benefits
- 100% Remote: We’ve been a remote team from day one – and we’ve got the tools, systems and processes to be successful outside of a corporate office or HQ.
- PTO & Other Leave: We offer 12 weeks of paid parental leave, along with vacation, sick time, bereavement leave, and floating holidays.
- Growth Opportunities: We’re committed to teammate development, both within and outside of Huntress – including education assistance programs like LifeLabs, hands-on training, coaching through BetterUp, and more.
- Stock Options: All full-time teammates receive stock options and benefit from the continued growth and success of the company.
- Digital Monthly Reimbursements: We offer a monthly digital reimbursement for your internet and phone – plus a new starter home office reimbursement.
- 401K Match: We offer a 5% contribution to your 401k – even if you’re not paying into it yourself.
- Health Benefits: Medical, dental, vision, life & disability insurance, pet insurance, and other benefits you’d expect from a company that cares about its team members.
Company HQ
Columbia, MD
Leadership
Kyle Hanslovan
(Co-Founder & CEO)Prior to co-founding Huntress in 2015, Kyle spent 9 years at the Air National Guard as a Cyber Warfare Operator.
Chris Bisnett
(Co-Founder & CTO)Chris is US Navy Veteran, serving for five years as a Vulnerability Analyst focused on the Department of Defense network. He then operated in a number of Senior Security Engineering roles after leaving the Navy.
John Ferrell
(Co-Founder)John spent 5 years as a Security Engineer and CNO Analyst over two spells at ManTech International, with 1 year as a Linux Systems Engineer at SPARTA in the interim. He was also a CNO Developer at StrategicIO before co-founding Huntress.
Share this job
View 14 more jobs at Huntress