Senior Detection Engineering & Threat Hunting Analyst

About the role

Join Huntress as a Senior Detection Engineering & Threat Hunting Analyst, working remotely from Australia to help protect millions of endpoints worldwide. You will translate threat intelligence into high‑fidelity detections and proactively hunt for stealthy adversary activity.

Key responsibilities

• Design, build, test, monitor, and retire detection rules across ITDR, SIEM, EDR and multiple operating systems.
• Conduct hypothesis‑driven hunts on Huntress telemetry, prioritising techniques that evade existing detections.
• Consume threat intelligence and convert IOCs/TTPs into detections using Git‑based workflows.
• Develop and maintain hunting dashboards, queries and AI‑assisted workflows.
• Investigate or escalate likely intrusions and provide clear incident reports to partners.

Required profile

• 2+ years in detection engineering, threat hunting, SOC, MDR or incident response.
• Intermediate knowledge of Windows internals and working knowledge of Linux, macOS, Microsoft 365, Azure and Google Workspace.
• Experience creating, testing and documenting detections from threat intelligence or real‑world investigations.
• Strong written communication skills for clear incident reporting.

Required skills

• Detection languages: Sigma, Suricata, Snort, YARA.
• Query languages: KQL, EQL, ES|QL, Splunk SPL.
• Familiarity with adversary tactics (persistence, privilege escalation, lateral movement, etc.).li>
• Tools: OSquery, Velociraptor, EDR/MDR/XDR platforms, forensic tools such as EZ Tools, RegRipper, Hayabusa, Chainsaw.

What we offer

• Fully remote work with an annual US summit trip and local events in Australia.
• Home office setup reimbursement ($800 AUD) and monthly tech stipend.
• 12 weeks paid parental leave, digital allowance, private health insurance subsidy, stock options and coaching platform access.