← All roles

Staff CSIRT Analyst

Huntress· Adversary Informed Defense
Apply on company site
Remote$200k - $210kfull-timePosted 1mo ago

About the role

Senior internal security role focused on incident response leadership, threat visibility, and organizational resilience. Leads end-to-end incident response lifecycle, improves detection and response capabilities, and partners across teams to harden defenses.

Responsibilities

  • Incident Response & Triage: Lead the identification, triage, and validation of security incidents through various telemetry sources, acting as the ultimate escalation point for the SOC.
  • Strategic Preparedness: Drive organizational incident readiness by designing and executing practical response exercises (tabletops and purple teaming) to ensure first responders are prepared at all levels of our organization.
  • Telemetry Optimization: Partner with engineering, product security, and detection engineering teams to tune existing telemetry sources to a high true-positive rate, reducing noise and increasing detection efficacy.
  • Offensive Security Partnership: Collaborate closely with the Offensive Security team to identify visibility gaps and ensure proper coverage against modern threat actor TTPs, coordinating with product security, engineering, and other units to close gaps.
  • Continuous Improvement & Leadership: Lead cross-functional Post-Incident Reviews (PIRs) and manage remediation tasks to harden defenses and response capabilities.
  • Stakeholder Communication: Develop and present comprehensive reports and lessons learned to stakeholders after major incidents or exercises.
  • Documentation: Create and maintain playbooks, system configurations, and incident response standards to ensure scalability and supportability.

Qualifications

  • 8+ years of experience in Incident Response, SOC Operations, or Digital Forensics (DFIR).
  • Advanced knowledge of EDR/MDR platforms, log aggregation (SIEM/ELK), and cloud security environments (AWS/Azure/M365).
  • Ability to articulate root causes and translate insights into technical solutions.
  • Experience leading small project teams and aligning tech stacks across functions.
  • Excellent communication skills to convey complex incident details to technical teams and executive leadership.
  • Familiarity with automation/SOAR platforms and documentation tools like Confluence, Jira, and Lucid Chart.
  • Proactive, forward-thinking security mindset and commitment to inclusive security practices.

Skills

Required:Incident ResponseSOC OperationsEDR/MDRSIEM/ELKCloud Security (AWS/Azure/M365)CommunicationProject Leadership
Nice to have:Automation/SOARDocumentation Tools

Benefits

  • 100% remote work environment
  • Generous paid time off (vacation, sick time, holidays)
  • 12 weeks of paid parental leave
  • Medical, dental, and vision benefits
  • 401(k) with 5% company contribution
  • Life and Disability insurance
  • Stock options for all full-time employees
  • One-time $500 home office reimbursement
  • Annual education and professional development allowance
  • $75 USD/month digital reimbursement
  • Access to BetterUp coaching and growth resources
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Huntress

Enterprise-grade cybersecurity for ALL businesses.

Stop cyberattacks with the Huntress Managed Platform. Get 24/7 SOC-backed EDR, ITDR, SIEM, & Security Awareness Training for enterprise-grade protection across all your environments

cybersecurityendpoint protectionEDRITDRSIEMSecurity Awareness Training
Company profileWebsite

More open roles at Huntress