Senior Detection Engineering, Threat Hunting Analyst

🔥 1 hour ago

🇦🇺 Australia – Remote

💵 $150k - $170k / year

⏰ Full Time

🟠 Senior

🖥 Software Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Huntress

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

Consulting • Healthcare • Manufacturing

Huntress is a cybersecurity firm that provides managed detection, investigation, and response solutions to protect endpoints, identities, and email environments. It offers a platform with managed EDR, security awareness training, ITDR for Microsoft 365, and SIEM solutions, all supported by a 24/7 Security Operations Center. Huntress is designed to secure small and medium-sized businesses against cyber threats. Their services help organizations across industries, ensuring robust protection and compliance, especially in environments like education, finance, healthcare, manufacturing, and government.

📋 Description

• Contribute to all parts of the detection lifecycle by creating new rules, testing them before deployment, monitoring efficacy, and tuning, promoting, or retiring rules based on performance. • Develop rules across Huntress products and operating systems, including ITDR, SIEM, EDR, Windows, Linux, and MacOS. • Manage DE&TH requests raised internally or escalated from partners. • Undertake hypothesis-driven hunts across Huntress telemetry to identify techniques and tradecraft that may evade detections and initial SOC review. • Consume threat intelligence and translate IOCs, TTPs, and internal findings into detections through Git-based workflows. • Build and refine hunting dashboards or queries to surface potential intrusions. • Review ambiguous attacker activity and surface likely intrusions requiring deeper investigation. • Investigate or escalate likely intrusions so partners receive clear incident reports and accurate advice. • Contribute findings to community-driven projects and create blogs, social posts, videos, podcasts, and webinars. • Use AI-assisted workflows to prototype queries, enrich analysis, and develop detection-rule scaffolding while validating AI output. • Work alongside the 24x7 Security Operations Center, Adversary Tactics & Tactical Response, engineering, and adjacent teams.

🎯 Requirements

• 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response. • Intermediate knowledge of Windows internals. • Working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace. • Experience developing, testing, tuning, and documenting detections or analytics from threat intelligence, IOCs, hypotheses, or real-world investigations. • Ability to communicate findings through clear written reports. • Strong familiarity with detection languages such as Sigma, Suricata, Snort, or YARA, and query languages such as KQL, EQL, ES|QL, or Splunk SPL. • A sound understanding of adversary tradecraft, including techniques used for persistence, privilege escalation, defense impairment, lateral movement, discovery, and collection on a system. • A sound understanding of the roles different threat actors play and their associated goals, such as: initial access brokers, ransomware affiliates, and state-sponsored entities. • Ability to orchestrate reusable AI workflows that improve threat hunting, detection development, or analysis, and can verify AI-generated outputs before they reach production environments. • Bonus points for intermediate knowledge of Linux and MacOS internals, hands-on experience with OSquery, Velociraptor, EDR/MDR/XDR platforms, forensic tooling, and intermediate malware analysis skills.

🏖️ Benefits

• Fully remote work • At least one annual trip to the US for Summer Summit, with additional local events in Australia! • New starter home office set up reimbursement ($800 AUD) • 12 weeks paid parental leave for both primary and secondary carers • Monthly digital allowance for personal phone and internet costs ($185 AUD) • Monthly home office tech stipend to upgrade or replace equipment ($40 AUD) • Subsidised private health insurance through our preferred provider • Stock options for all full-time employees • Access to the BetterUp platform for coaching, personal, and professional growth

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume