← All roles

Senior Detection Engineering & Threat Hunting Analyst

Huntress· DE&TH
Apply on company site
Hybrid (Remote Australia)A$150k - A$170kFull-timePosted 3w ago

About the role

Senior role in Detection Engineering & Threat Hunting within Huntress' remote-first team, focused on designing, deploying, and refining detections and proactively hunting threats at scale across endpoints and identities. Works closely with SOC and Adversary Tactics & Tactical Response functions to detect, respond, and disrupt attacker activity.

Responsibilities

  • Contribute to all parts of the detection lifecycle by creating new rules, testing them before deployment, monitoring efficacy, and tuning, promoting, or retiring rules based on their performance.
  • Develop rules across a variety of Huntress products and operating systems such as ITDR, SIEM, EDR, Windows, Linux, and MacOS.
  • Manage DE&TH requests raised internally or escalated from partners.
  • Undertake hypothesis-driven hunts across Huntress telemetry, prioritising techniques and tradecraft that may evade high-fidelity detections and initial SOC review.
  • Consume threat intelligence and translate IOCs, TTPs, and internal findings into new or refined detections through Git-based workflows.
  • Build and refine hunting dashboards or queries required to surface potential intrusions.
  • Review ambiguous signs of attacker activity across Huntress products, and surface likely intrusions that require deeper investigation.
  • Investigate or escalate likely intrusions identified to ensure partners receive clear incident reports with accurate advice.
  • Contribute findings to community-driven projects and create Huntress content such as blogs, social posts, videos, podcasts, and webinars.
  • Use AI-assisted workflows to prototype queries, enrich analysis, and develop a scaffolding for detection rules, ensuring you apply sound judgment to validate the AI output.

Qualifications

  • 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response.
  • Intermediate knowledge of Windows internals.
  • Working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace.
  • Experience developing, testing, tuning, and documenting detections or analytics from threat intelligence, IOCs, hypotheses, or real-world investigations.
  • Ability to communicate findings through clear written reports.
  • Strong familiarity with detection languages such as Sigma, Suricata, Snort, or YARA, and query languages such as KQL, EQL, ES|QL, or Splunk SPL.
  • Understanding of adversary tradecraft including persistence, privilege escalation, defense impairment, lateral movement, discovery, and collection.
  • Understanding of roles of different threat actors (initial access brokers, ransomware affiliates, state-sponsored entities).
  • Ability to orchestrate reusable AI workflows to improve threat hunting, detection development, or analysis, and verify AI outputs before production.

Skills

Required:Detection engineeringThreat huntingDetection languagesQuery languages

Benefits

  • Fully remote work
  • At least one annual trip to the US for Summer Summit, with additional local events in Australia
  • New starter home office set up reimbursement (AU$800)
  • 12 weeks paid parental leave for both primary and secondary carers
  • Monthly digital allowance for personal phone and internet costs (AU$185)
  • Monthly home office tech stipend (AU$40)
  • Subsidised private health insurance through preferred provider
  • Stock options for all full-time employees
  • Access to the BetterUp platform for coaching, personal, and professional growth
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Huntress

Enterprise-grade cybersecurity for ALL businesses.

Stop cyberattacks with the Huntress Managed Platform. Get 24/7 SOC-backed EDR, ITDR, SIEM, & Security Awareness Training for enterprise-grade protection across all your environments

cybersecurityendpoint protectionEDRITDRSIEMSecurity Awareness Training

More open roles at Huntress