Senior Detection Engineering & Threat Hunting Analyst

Career Tools

About This Role

Huntress seeks a Senior Detection Engineering & Threat Hunting Analyst to join its remote team in Australia. Founded in 2015 by former NSA cyber operators, the company provides enterprise-grade cybersecurity solutions to businesses worldwide, operating a 24/7 human-led Security Operations Center and securing millions of endpoints and identities. In this role, the analyst will work alongside the Security Operations Center and Adversary Tactics units to impede threat actors, tackle difficult…

Job Description

Responsibilities

• Manage the complete detection lifecycle by authoring new rules, testing efficacy prior to deployment, and continuously monitoring, tuning, or retiring rules based on performance.
• Develop security rules across multiple operating systems and product domains including Identity Threat Detection and Response, Security Information and Event Management, and Endpoint Detection and Response.
• Handle internal and partner-escalated detection engineering and threat hunting requests.
• Conduct hypothesis-driven threat hunts across telemetry to discover stealthy tradecraft that bypasses standard detections.
• Convert threat intelligence indicators of compromise, tactics, techniques, and procedures into refined detections via Git workflows.
• Construct and optimize hunting dashboards and queries to uncover potential system intrusions.
• Examine ambiguous activity indicators across products to identify likely intrusions requiring deep investigation.
• Escalate confirmed security incidents with accurate advice and clear reports for partners.
• Contribute research findings to community initiatives and produce internal content such as webinars, blog posts, and podcasts.
• Employ AI-assisted workflows for query prototyping, analysis enrichment, and rule scaffolding while validating outputs.

Requirements

• At least two years of professional background in threat hunting, detection engineering, incident response, managed detection and response, or security operations center environments.
• Intermediate comprehension of Windows internals.
• Practical familiarity with macOS, Linux, Microsoft 365, Azure, and Google Workspace.
• Demonstrated history of building, testing, refining, and documenting analytics derived from threat intelligence or investigations.
• Proficiency in conveying technical findings through concise written incident reports.
• Familiarity with query languages such as KQL, EQL, ES|QL, or Splunk SPL, and detection frameworks like Sigma, Suricata, Snort, or YARA.
• Knowledge of adversary tradecraft regarding persistence, privilege escalation, lateral movement, collection, and defense evasion.
• Understanding of threat actor motivations and roles including state-sponsored entities, initial access brokers, and ransomware affiliates.
• Capability to build reusable AI workflows for analysis and threat hunting while verifying generated outputs before deployment.

Qualifications

• Intermediate knowledge of Linux and macOS internals.
• Practical experience utilizing remote discovery tools including OSquery, Velociraptor, and EDR, MDR, or XDR systems.
• Prior usage of forensic utility software such as RegRipper, Chainsaw, Hayabusa, or Eric Zimmerman's EZ Tools.
• Intermediate skills in malware analysis.

Core Skills

Benefits

• Base salary between $150,000 and $170,000 AUD plus bonus and equity.
• Fully remote work arrangement.
• At least one annual trip to the United States for the Summer Summit alongside local events in Australia.
• New starter home office setup reimbursement of $800 AUD.
• 12 weeks of paid parental leave for primary and secondary caregivers.
• Monthly digital allowance of $185 AUD for internet and personal phone expenses.
• Monthly home office technology stipend of $40 AUD for equipment maintenance.
• Subsidized private health insurance through a preferred provider.
• Stock options for all full-time employees.
• Access to the BetterUp platform for professional and personal growth coaching.

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.