Security Operations Analyst (Ireland)

Join Huntress, a mission-driven company dedicated to protecting businesses from cyber-attacks. As a Security Operations Center Analyst, you will triage, investigate, respond to, and remediate various intrusions daily. You will work with a passionate team and have opportunities for career growth and skill development. The position is 100% remote and offers a comprehensive benefits package, including health insurance, a 401K match, and stock options.

• Triage, investigate, and respond to alerts from the Huntress platform, performing tactical reviews of EDR telemetry and forensic artifacts.
• Assist in escalations from the Product Support team for threat-related and SOC-relevant questions, contributing to detection engineering efforts.
• Contribute to projects focused on driving better outcomes for analysts and partners, and participate in a collaboratively mentored team.
• Working knowledge of Windows Administration or Enterprise Domain Administration
• Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
• Working knowledge of web technologies and concepts
• Active Directory, Group Policy, Domain Trusts, etc
• Common ports/protocols, NAT, Public/Private IPs, VLANs, etc
• Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments
• Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes
• Demonstrated experience with static and dynamic malware analysis concepts
• A strong sense of curiosity and a genuine excitement for learning
• Demonstrated experience with Windows, Linux, and MacOS as an attack surface
• 2+ years experience in a SOC or Digital Forensics (DFIR) role
• Working knowledge of core networking concepts
• Web servers/applications, OWASP top 10, etc
• Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc
• Linux and MacOS investigative experience
• Previous experience in an MSP/MSSP/MDR role
• Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
• Familiarity with MSP tools such as RMMs
• Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc
• Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc