Security Operations Analyst

Security Operations Analyst in Costa Mesa on Anduril's Detection and Response team, acting as an early line of defense for the company's military technology. The analyst handles alerts and incidents involving phishing, endpoints, cloud services and SaaS, writes and refines detection content and response automation as code, feeds tuning back to detection engineering, organises threat hunts and baselines of normal behaviour, and joins the on-call rotation. Senior analysts lead incidents as commanders and mentor others.

The team is looking for detection and log analysis experience across endpoint, network and application data, Python for automating SOC work, a SIEM query language, practical knowledge of identity, network and cloud security, and an understanding of attacker TTPs. Cloud incident response and forensics are pluses. Candidates must be able to obtain a Top Secret clearance.