Associate Triage Analyst

Reports to: Senior Manager, Triage • Location: Remote US

About the role

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.

Responsibilities

• Data Review & Qualification: Rapidly assess incoming security signals from a dedicated queue, using established playbooks to determine if activity is "benign" or "potentially malicious."
• Noise Reduction: Dismiss signals determined to be non-actionable or benign to prevent alert fatigue for the senior Analysis team.
• Incident Escalation: Categorize and tag qualified threats, creating investigation tickets that provide clear, concise initial context for the Analysis team.
• Continuous Learning: Actively participate in training modules, labs, and certification programs to build foundational security knowledge.
• Operational Shadowing: Shadow senior analysts to understand the full lifecycle of an investigation and prepare for future career advancement.
• Process Feedback: Identify and document trends in noisy signal sources (e.g., specific software generating benign alerts) to help refine our detection tuning.

Requirements

• 0-2 years of experience in IT or Cybersecurity, or equivalent practical skills gained through internships, bootcamps, or self-directed learning.
• A foundational understanding of operating systems (Windows/Mac), basic networking concepts (IPs, DNS, HTTP), and common security terminology.
• A strong curiosity for how things work and the ability to follow logical workflows or playbooks to solve problems.
• Clear written communication skills are essential for documenting findings and creating escalation tickets.
• Actively partner with the SOC team, with the long-term goal of advancing into a core security operations role.

Qualifications

• Entry-level certifications such as CompTIA Security+, Network+, or similar are a plus, but a demonstrated passion for security is most important.
• Active participation in conferences, CTFs, or cyber security organizations.

Benefits

• 100% remote work environment since our founding in 2015
• Generous paid time off policy, including vacation, sick time, and paid holidays
• 12 weeks of paid parental leave
• Highly competitive and comprehensive medical, dental, and vision benefits plans
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans
• Stock options for all full-time employees
• One-time $500 reimbursement for building/upgrading home office
• Annual allowance for education and professional development assistance
• $75 USD/month digital reimbursement
• Access to the BetterUp platform for coaching, personal, and professional growth

Pay

$55,000 to $70,000 base plus bonus and equity