Senior Detection Engineering & Threat Hunting Analyst
Huntress· DE&TH
Hybrid (Remote Australia)A$150k - A$170kFull-timePosted 3w ago
About the role
Senior role in Detection Engineering & Threat Hunting within Huntress' remote-first team, focused on designing, deploying, and refining detections and proactively hunting threats at scale across endpoints and identities. Works closely with SOC and Adversary Tactics & Tactical Response functions to detect, respond, and disrupt attacker activity.
Responsibilities
- Contribute to all parts of the detection lifecycle by creating new rules, testing them before deployment, monitoring efficacy, and tuning, promoting, or retiring rules based on their performance.
- Develop rules across a variety of Huntress products and operating systems such as ITDR, SIEM, EDR, Windows, Linux, and MacOS.
- Manage DE&TH requests raised internally or escalated from partners.
- Undertake hypothesis-driven hunts across Huntress telemetry, prioritising techniques and tradecraft that may evade high-fidelity detections and initial SOC review.
- Consume threat intelligence and translate IOCs, TTPs, and internal findings into new or refined detections through Git-based workflows.
- Build and refine hunting dashboards or queries required to surface potential intrusions.
- Review ambiguous signs of attacker activity across Huntress products, and surface likely intrusions that require deeper investigation.
- Investigate or escalate likely intrusions identified to ensure partners receive clear incident reports with accurate advice.
- Contribute findings to community-driven projects and create Huntress content such as blogs, social posts, videos, podcasts, and webinars.
- Use AI-assisted workflows to prototype queries, enrich analysis, and develop a scaffolding for detection rules, ensuring you apply sound judgment to validate the AI output.
Qualifications
- 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response.
- Intermediate knowledge of Windows internals.
- Working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace.
- Experience developing, testing, tuning, and documenting detections or analytics from threat intelligence, IOCs, hypotheses, or real-world investigations.
- Ability to communicate findings through clear written reports.
- Strong familiarity with detection languages such as Sigma, Suricata, Snort, or YARA, and query languages such as KQL, EQL, ES|QL, or Splunk SPL.
- Understanding of adversary tradecraft including persistence, privilege escalation, defense impairment, lateral movement, discovery, and collection.
- Understanding of roles of different threat actors (initial access brokers, ransomware affiliates, state-sponsored entities).
- Ability to orchestrate reusable AI workflows to improve threat hunting, detection development, or analysis, and verify AI outputs before production.
Skills
Required:Detection engineeringThreat huntingDetection languagesQuery languages
Benefits
- Fully remote work
- At least one annual trip to the US for Summer Summit, with additional local events in Australia
- New starter home office set up reimbursement (AU$800)
- 12 weeks paid parental leave for both primary and secondary carers
- Monthly digital allowance for personal phone and internet costs (AU$185)
- Monthly home office tech stipend (AU$40)
- Subsidised private health insurance through preferred provider
- Stock options for all full-time employees
- Access to the BetterUp platform for coaching, personal, and professional growth
Last updated Oct 22, 2026. Interested? Apply on the company site.
About Huntress
Enterprise-grade cybersecurity for ALL businesses.
Stop cyberattacks with the Huntress Managed Platform. Get 24/7 SOC-backed EDR, ITDR, SIEM, & Security Awareness Training for enterprise-grade protection across all your environments
cybersecurityendpoint protectionEDRITDRSIEMSecurity Awareness Training
More open roles at Huntress
- Senior IT Automation Engineer5d agoRemote · Information Technology Operations
- Manager, Security Operations Center5d agoRemote · Security Analysis
- Director, Revenue Readiness5d agoHybrid (Remote US) · Sales Acceleration
- Product Support Specialist- Eastern Time Zone5d agoHybrid (Eastern Time Zone) · Product Support
- Principal macOS Security Researcher1w agoRemote · Product Research