Staff CSIRT Analyst

🔥 3 minutes ago

🇺🇸 United States – Remote

💵 $200k - $210k / year

⏰ Full Time

🔴 Lead

🚨 Incident Response Analyst

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Huntress

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

Consulting • Healthcare • Manufacturing

Huntress is a cybersecurity firm that provides managed detection, investigation, and response solutions to protect endpoints, identities, and email environments. It offers a platform with managed EDR, security awareness training, ITDR for Microsoft 365, and SIEM solutions, all supported by a 24/7 Security Operations Center. Huntress is designed to secure small and medium-sized businesses against cyber threats. Their services help organizations across industries, ensuring robust protection and compliance, especially in environments like education, finance, healthcare, manufacturing, and government.

📋 Description

• Act as the primary internal escalation point from the SOC • Strategize with leaders across multiple functions to identify work streams • Own the end-to-end incident response lifecycle • Guide teams, determine key milestones, and proactively anticipate blockers • Lead identification, triage, and validation of security incidents through various telemetry sources • Design and execute incident response exercises, including tabletops and purple teaming • Partner with engineering, product security, and detection engineering teams to optimize telemetry and increase detection efficacy • Collaborate with Offensive Security to identify visibility gaps and ensure coverage against modern threat actor TTPs • Lead cross-functional Post-Incident Reviews and own resulting remediation tasks • Develop and present comprehensive incident reports and lessons learned • Create and maintain playbooks, system configurations, and incident response standards

🎯 Requirements

• 8+ years of experience in Incident Response, SOC Operations, or Digital Forensics (DFIR) • Advanced knowledge of EDR/MDR platforms, log aggregation (SIEM/ELK), and cloud security environments (AWS/Azure/M365) • Proven ability to articulate the root cause of complex problems using first principles and translate insights into technical solutions • Experience leading small project teams and aligning tech stacks across functions • Exceptional ability to convey complex technical incident details to technical teams and executive leadership • Familiarity with automation/SOAR platforms and documentation tools like Confluence, Jira, and Lucid Chart • A proactive, forward-thinking approach to security with a passion for building stewardship of culture through inclusive and actionable security behaviors

🏖️ Benefits

• 100% remote work environment • Generous paid time off policy, including vacation, sick time, and paid holidays • 12 weeks of paid parental leave • Highly competitive and comprehensive medical, dental, and vision benefits plans • 401(k) with a 5% contribution regardless of employee contribution • Life and Disability insurance plans • Stock options for all full-time employees • One-time $500 reimbursement for building/upgrading home office • Annual allowance for education and professional development assistance • $75 USD/month digital reimbursement • Access to the BetterUp platform for coaching, personal, and professional growth

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume