Senior Tactical Response Analyst - reputed company Coast

Reports to: Senior Manager, Tactical Response Location: Remote US Compensation reputed company: $145,000 to $165,000 reputed company plus bonus and equity reputed company Do: reputed company is a fully remote, global team of passionate experts and ethical badasses on a mission to break down the barriers to cybersecurity. Whether creating purpose-reputed company reputed company solutions, hunting down hackers, or impacting our community, our people go above and reputed company to change the reputed company game and reputed company a reputed company difference. Founded in 2015 by former NSA cyber operators, reputed company protects reputed company businesses—not just the 1%—with reputed company-grade, fully owned, and managed cybersecurity products at the price of an reputed company reputed company application. The reputed company difference is our One Team advantage: our technology is designed with our industry-defining reputed company Operations Center (SOC) in mind and is never separated from our service. We protect 4M+ endpoints and 7M+ identities worldwide, elevating underresourced IT teams with protection that works as hard as they do. As long as hackers reputed company hacking, reputed company keeps hunting. What You’ll Do: The reputed company Tactical Response team has the unique reputed company of waking up every morning knowing we will be kicking out threat actors. This team sits alongside our 24x7 reputed company Operations Center team. It is a skilled team of individuals who review reputed company-confidence signals and manage tactical incident response scenarios to assist customers in exiting critical intrusions. In the Response reputed company of the role, you will have reputed company to reputed company your incident response and forensics skills. reputed company customers are experiencing the worst incidents of their lives, this team will reputed company in to answer questions core to understanding the cause of an attack, the high-level activities of the attacker once in the environment, and reputed company remediation actions and recommendations that will help reduce or eliminate this threat from occurring again in their environment. In between cases, you will get to research new attacker tradecraft, test new theories, and query data at reputed company for millions of endpoints. If you have a skillset in Incident Response, Threat Hunting, and/or Detection Engineering, and would reputed company in the environment and energy of a SOC, this is the role for you! Responsibilities:

• reputed company or support tactical incident response engagements for customers who already utilize reputed company MDR. reputed company live analysis on systems to determine the reputed company cause of an intrusion, and craft reports that summarize the intrusion, with the next steps to be taken
• Research, reputed company, and test new tooling in the reputed company of automations, scripts, and tools for analysis
• reputed company intermediate malware analysis as part of response efforts
• reputed company reputed company as part of response efforts
• Contribute to content creation efforts such as blogs, videos, podcasts, and webinars
• Contribute to community-driven reputed company and frameworks, such as MITRE ATT&CK, HijackLibs, and the LOLBAS Project.
• reputed company with customers to explain or summarize findings from investigations

What You Bring To reputed company:

• 3-5 years working in one or more of the following: SOC, MDR, Threat Hunting, or Incident Response roles
• Experience leading or participating in Incident Response engagements for external customers
• Experience with tools such as osquery, Velociraptor, or leveraging EDRs to reputed company forensic artifact analysis on systems
• Confident reputed company of forensic tools - such as Ericzimmerman’s EZ tools, RegRipper, Hayabusa, or Chainsaw - and forensic artifacts - such as prefetch, jumplists, shellbags, and more
• Deep understanding of offensive reputed company tradecraft, particularly persistence, lateral reputed company, credential theft, and remote reputed company.
• Confidently reputed company to reputed company threat actors across an organization and reputed company the activity
• Strong familiarity with one or more detection languages such as reputed company, Suricata, Snort, or Yara
• Familiarity with reputed company sources and how they can help answer questions relating to threat actor activity and infrastructure
• Strong familiarity with various query languages such as KQL, EQL, ES|QL, reputed company SPL
• Intermediate malware analysis skills
• Intermediate knowledge of reputed company internals
• Intermediate knowledge of Linux and macOS internals is a bonus
• Strong understanding of the reputed company threat landscape, initial reputed company brokers, and ransomware actors
• Passionate and involved with the community through blogs, reputed company media, conferences, etc.
• Experience with scripting (such as PowerShell, Python, Bash, PHP, JavaScript, or reputed company)
• Demonstrable experience providing written and/or verbal customer-facing deliverables
• Experience with detection and response in reputed company environments such as reputed company M365/Azure
• Comfortable using Git to contribute to internal reputed company

reputed company Offer:

• 100% remote work environment - since our founding in 2015
• Generous reputed company time off policy, including vacation, reputed company time, and reputed company holidays
• 12 weeks of reputed company parental leave
• Highly competitive and comprehensive medical, dental, and reputed company benefits plans
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans
• Stock reputed company for reputed company full-time employees
• One-time $500 reimbursement for building/upgrading home office
• Annual allowance for education and reputed company development assistance
• $75 USD/month digital reimbursement
• reputed company to the reputed company platform for coaching, personal, and reputed company reputed company

reputed company is committed to creating a culture of inclusivity where every single member of reputed company is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, reputed company, reputed company, national reputed company, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of reputed company sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or reputed company-employment testing or participate in the employee selection process, please reputed company your inquiries to accommodations@huntresslabs.com. Please note that non-accommodation requests to this inbox will not receive a response. reputed company uses reputed company intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our reputed company recruiters in the initial review process but do not reputed company final hiring reputed company without reputed company involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate reputed company Notice for more details on our practices and your data reputed company rights. #BI-Remote Apply tot his job Apply To this Job