Huntress
Security Operations Analyst
Remote, Australia· REMOTE
About the role
The analyst investigates and responds to platform alerts using EDR/SIEM telemetry and forensic artifacts, performs malware analysis and refines detections. Work also includes cloud collaboration tool investigations and customer escalations. Published shifts are business hours in AWST or AEST.
What you will do
- Triage, investigate and respond to platform alerts
- Review EDR/SIEM telemetry and forensic artifacts to find root cause
- Perform tactical malware analysis
- Investigate suspicious Microsoft 365 / cloud activity
- Contribute to detection creation and tuning
What they ask for
- 2+ years in SOC, incident response, MDR or DFIR
- Windows, Linux or macOS experience
- Active Directory, PowerShell, Group Policy and account management
- MITRE ATT&CK techniques such as credential dumping and lateral movement
- Log and artifact analysis
- Comfort using AI tools for security analysis
- Remote within Australia
- Shifts: Mon–Fri 8–16 AWST, Mon–Fri 9–17 AEST, or Tue–Fri 8–18 AEST
What applying with Rooted means
This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.
Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.
You can read this role without an account. To apply you need a Rooted credential.
This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Huntress. Confirm the final details with the original source or during the application process.
Posted 2026-09-17