Staff CSIRT Analyst

The role

You will act as the primary internal escalation point from the SOC to ensure internal security resilience. You will lead the incident response lifecycle and strategize with leaders to identify work streams and anticipate blockers.

What you will do

• Lead the identification, triage, and validation of security incidents through various telemetry sources
• Drive organizational incident readiness by designing and executing practical response exercises
• Partner with engineering, product security, and detection engineering teams to tune telemetry sources
• Collaborate with the Offensive Security team to identify visibility gaps
• Lead cross-functional Post-Incident Reviews to extract critical lessons learned
• Own the lifecycle of resulting remediation tasks
• Develop and present comprehensive reports and lessons learned to stakeholders
• Create and maintain playbooks, system configurations, and incident response standards

Required qualifications

• 8+ years of experience in Incident Response, SOC Operations, or Digital Forensics (DFIR)
• Advanced knowledge of EDR/MDR platforms, log aggregation (SIEM/ELK), and cloud security environments (AWS/Azure/M365)
• Proven ability to articulate the root cause of complex problems using first principles and translate insights into technical solutions
• Experience leading small project teams and aligning tech stacks across functions
• Exceptional ability to convey complex technical incident details to both technical teams and executive leadership
• Familiarity with automation/SOAR platforms and documentation tools like Confluence, Jira, and Lucid Chart
• A proactive, forward-thinking approach to security

Benefits

• 100% remote work environment
• Generous paid time off policy, including vacation, sick time, and paid holidays
• 12 weeks of paid parental leave
• Highly competitive and comprehensive medical, dental, and vision benefits plans
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans
• Stock options for all full-time employees
• One-time $500 reimbursement for building/upgrading home office
• Annual allowance for education and professional development assistance
• $75 USD/month digital reimbursement
• Access to the BetterUp platform for coaching, personal, and professional growth

Before you apply

• By submitting your application, you acknowledge the use of AI in our recruitment process

About the company

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes.