Latest AI JobsBrowse Jobs
Huntress logo

Senior Detection Engineering & Threat Hunting Analyst

HuntressUnited States of AmericaDE&TH
Apply on company site
Salary
$150K - $170K USD
Job type
Full-time
Posted
22 Sept 2026
Status
Open · checked 7d ago

About this role

The Senior Detection Engineering & Threat Hunting Analyst role at Huntress is a remote position based in the United States, offering a great opportunity for cybersecurity professionals with relevant industry background. This role suits individuals who enjoy tackling complex security challenges, building resilient detection portfolios, and working closely with a 24/7 Security Operations Center.

Role Overview

As a Senior Detection Engineering and Threat Hunting Analyst, the primary focus is to disrupt malicious threat actors through a blend of proactive threat hunting and advanced detection engineering. Operating alongside the Security Operations Center and Adversary Tactics teams, this professional transforms threat intelligence and unique hypotheses into scalable detections. The position involves managing false positives and negatives at scale, reviewing ambiguous attacker behaviors, and building robust rules across multiple products and operating systems like Windows, Linux, and macOS.

Key Responsibilities

Own the complete detection lifecycle by creating, testing, monitoring, tuning, and retiring rules based on performance metrics.
Develop comprehensive security rules across endpoint, identity, and SIEM products including ITDR, EDR, and SIEM platforms.
Handle internal detection requests as well as escalated partner inquiries.
Conduct hypothesis-driven threat hunts across telemetry data to surface evasive techniques and stealthy threat actor activities.
Translate indicators of compromise and tactics, techniques, and procedures into Git-supported detection rules.
Build and refine queries and dashboards to identify potential system intrusions.
Investigate suspicious activity and escalate verified incidents with precise reporting and remediation advice.
Author public-facing community content such as blog posts, webinars, and podcasts.
Utilize AI-assisted workflows to prototype detection queries and scaffolding while strictly validating the generated outputs.

Requirements

Minimum of 2 years of professional background in threat hunting, detection engineering, incident response, Managed Detection and Response, or a SOC environment.
Intermediate knowledge regarding Windows internal systems.
Working knowledge of Azure, Google Workspace, Microsoft 365, Linux, and macOS.
Demonstrated capability in building, tuning, testing, and documenting analytics derived from real investigations, IOCs, or threat intelligence.
Strong technical writing skills to communicate investigative findings clearly.
Familiarity with detection languages such as YARA, Sigma, Suricata, or Snort, alongside query languages like KQL, Splunk SPL, EQL, or ES|QL.
Solid comprehension of adversary tradecraft, including defense impairment, lateral movement, persistence, and privilege escalation.
Thorough understanding of different threat actor motivations and profiles, such as ransomware affiliates and state-sponsored groups.
Proficiency in orchestrating AI-supported workflows while verifying output accuracy prior to production deployment.

Nice to Have

Intermediate capabilities regarding Linux and macOS internals.
Practical experience utilizing tools like Velociraptor, OSquery, or various EDR platforms to uncover compromise evidence.
Prior utilization of forensic software tools including RegRipper, Eric Zimmerman's EZ Tools, Chainsaw, or Hayabusa.
Intermediate skills in malware analysis.

Skills and Tools

Azure, Google Workspace, Microsoft 365
Windows, Linux, macOS internals
Detection and query languages: Sigma, YARA, Suricata, Snort, KQL, Splunk SPL, EQL, ES|QL
Git-based version control workflows
AI-assisted workflow tools for detection scaffolding and query prototyping

Salary and Benefits

Base compensation range between $150,000 and $170,000 annually, plus bonus eligibility and equity.
100% remote work environment from anywhere in the United States.
Comprehensive health insurance plans covering medical, dental, and vision.
Generous paid time off policy including holidays, sick days, and vacation time.
12 weeks of fully paid parental leave.
401(k) retirement plan featuring a 5% employer contribution regardless of employee deferrals.
Life insurance and disability coverage plans.
Stock options provided for full-time personnel.
One-time reimbursement of $500 for home office upgrades.
Annual professional development and education allowance.
Monthly digital stipend of $75 USD.
Subscription access to the BetterUp platform for personal and professional coaching.

About the Company

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first organization dedicated to making enterprise-grade cybersecurity available to businesses of all sizes. The company combines in-house developed technology with a human-led 24/7 Security Operations Center to protect millions of endpoints and identities worldwide, empowering service providers and security teams to operate with confidence.

How to Apply

Interested candidates should visit the official Huntress careers page to submit an application for this role.

Skills and tech stack

Azure

Questions candidates ask

Is this position fully remote?

Yes, this is a 100% remote position based in the United States.

What is the salary range for this role?

The base compensation range is between $150,000 and $170,000, plus bonus eligibility and equity.

How much experience is required?

Candidates must have at least 2 years of professional experience in detection engineering, threat hunting, incident response, MDR, or a SOC.

What benefits are included with employment?

Benefits include comprehensive medical, dental, and vision plans, a 401(k) with a 5% employer contribution, paid parental leave, stock options, remote work stipends, and professional development allowances.

What technical languages should applicants be familiar with?

Applicants should be familiar with detection languages such as Sigma, Suricata, Snort, or YARA, and query languages like KQL, EQL, ES|QL, or Splunk SPL.

Ready to apply?

The application is on the official Huntress careers page.

Apply on company site