Security Operations Analyst
Anduril Industries · Washington, District of Columbia, United States
About the role
Security Operations Analyst on Anduril's Detection and Response team, based in Washington, DC, watching the company's defense technology for adversary activity. The analyst triages and responds to alerts across phishing, endpoints, cloud and SaaS, writes detection signatures, playbooks and automation as code, tunes alerts with the detection engineering team, runs threat hunts and data baselines, joins threat modelling sessions and takes on-call shifts. Senior analysts also act as incident commanders and mentor junior staff.
The team wants experience with security monitoring and log analysis across large data sets, Python for SOC automation, a SIEM query language such as SPL, KQL or SQL, and knowledge of attacker techniques across operating systems and cloud. Candidates must be able to obtain a Top Secret clearance.