Jobs at Huntress

Manage onboarding and ongoing success for cybersecurity partners, ensuring rapid deployment, adoption, training, and value realization. Collaborate with account managers, technical sales, and support teams to resolve deployment challenges, monitor account health, support renewals, follow up after security incidents, and improve partner processes. The role supports approximately 7–10 channel account managers and drives measurable onboarding and adoption outcomes.

Own the vision, roadmap, and delivery of internal SOC tooling, including analyst UX, response workflows, investigation models, and automation. Partner with SOC leadership, engineering, design, and product teams to transform manual processes into scalable workflows. Define requirements, interfaces, operational metrics, and investment cases while improving analyst throughput, time-to-close, and delivery repeatability. The role requires deep SOC operations knowledge, cybersecurity product management experience, and expertise building operator-facing platforms and AI-enabled products.

Build, monitor, and scale resilient cloud infrastructure across multi-region and multi-cloud environments. Develop Kubernetes controllers and infrastructure tools using Go, Python, Ruby, and Terraform; maintain Datadog observability; diagnose complex production performance and reliability issues; automate failover and capacity management; and collaborate with engineering teams on architecture and infrastructure improvements.

Provides partner-facing support for cybersecurity incidents through email, chat, and phone. Triages SOC queues, troubleshoots security and product questions, translates findings into practical guidance, coordinates escalations, supports high-severity incident calls, documents investigations, manages follow-ups, and contributes to knowledge-base and process improvements. The role includes scheduled live coverage and occasional weekend or on-call support.

Monitor and investigate cybersecurity alerts, analyze endpoint telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity, then coordinate threat remediation. The analyst also supports escalations, contributes to detection engineering and tuning, and collaborates across the SOC. The role requires knowledge of operating systems, enterprise administration, networking, web security, attacker techniques, and malware analysis while working a remote weekend 4x10 shift after training.

The Sales Development Representative conducts outbound prospecting to internal IT departments and channel partners through phone, email, and LinkedIn. Responsibilities include building pipelines, qualifying prospects, setting product demos, supporting Account Executives, meeting sales quotas, maintaining accurate Salesforce records, and learning cybersecurity solutions. The role also involves exploring AI tools for prospect research, prioritization, outreach preparation, and follow-up in a remote environment.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

Manage and grow cybersecurity service provider partnerships through expansion, renewals, adoption, and retention. Serve as a trusted advisor to multiple stakeholders, achieve quota, improve partner satisfaction, and strengthen long-term loyalty. Use Salesforce or similar CRM tools and AI applications for account preparation, meeting summaries, organization, and follow-up. The role is a remote, high-visibility individual contributor position focused on MSP and channel partner success.

Provides entry-level, partner-facing SOC support by triaging security queues, communicating incident guidance, troubleshooting cybersecurity and product questions, coordinating escalations, documenting investigations, and following up through resolution. The role supports incident calls, live phone or chat coverage, knowledge-base improvements, cross-functional collaboration, and occasional weekend or on-call coverage. It requires clear communication, sound judgment, foundational cybersecurity knowledge, and organized remote work.

Support sales by providing technical product expertise, demonstrate Huntress platform, assess customer security posture, highlight risks, collaborate with Sales, Marketing, Support, and Engineering, and travel ~15% to meet customers.

Build and manage Huntress’s Security Quality Management System for agentic and human-led SOC investigations. Establish sampling methods, review cadences, quality standards, validation criteria, scorecards, and reporting. Independently assess investigation decisions, identify drift and recurring failures, lead root-cause analysis, validate corrective actions, and improve security operations in partnership with Analysis, Product, Engineering, and Security Operations. Initially hands-on, the role is expected to grow into leadership of the QMS function.

Lead modernization of high-throughput cybersecurity detection engines and event pipelines in Go. Own distributed-system reliability, observability, liveness monitoring, load management, schema standards, drift detection, migration validation, and safe cutovers. Provide hands-on technical leadership across teams, set platform direction, write and review production code, and support Sigma-based detection capabilities. Collaborate across a broad stack including Kafka, Temporal, Redis, ClickHouse, Elasticsearch, Kubernetes, cloud platforms, and Ruby on Rails.

Provides customer and partner support for cybersecurity incidents, escalations, SIEM questions, and product issues. Translates SOC concepts and log data into actionable guidance, leads communications during high-severity incidents, coordinates with internal security and support teams, troubleshoots product behavior, manages ticket queues, and contributes to knowledge-base articles and internal runbooks.

Provide customer and partner support for cybersecurity incidents, escalations, SIEM questions, and product issues. Translate SOC concepts and log data into actionable guidance, lead communications during complex incidents, coordinate with Product Support and Security Operations, troubleshoot issues, manage ticket priorities, and advocate for partner needs. The role also contributes to knowledge bases, macros, and runbooks while developing incident management skills in a remote environment.

Manage a high-volume portfolio of service provider partners, identify expansion opportunities, prospect stakeholders, support partner-led sales cycles, conduct product demonstrations, and drive adoption of Huntress managed security solutions. Track pipeline and engagement activity, collaborate with sales engineering and internal teams, enable partners, and use AI tools for account preparation, follow-up, and meeting summaries.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Provides technical product expertise and presentations to prospective customers, helping improve their security posture and positioning Huntress solutions. Partners with Sales, Marketing, Support, and Engineering to identify customer needs and product improvements. Reviews security issues with technical teams, supports MSP and VAR customers, and travels approximately 25% to meet customers.

Generate and qualify inbound and outbound leads in the Australian market, engage managed service providers through calls and email, communicate Huntress’s value proposition, and book qualified meetings for Account Executives. Maintain accurate CRM records, conduct 50+ daily calls, collaborate with sales management on targeting and messaging, and contribute to process improvements, training, and technology use.

Manage the EMEA Security Operations Center within a global 24/7 operation. Responsibilities include defining processes, workflows, and playbooks; maintaining shift coverage and quality assurance; coaching analysts; developing training; partnering with Product, Support, and security teams; improving incident response capabilities; tracking objectives and key results; operationalizing new services; and representing the company in public speaking engagements.

Manage EMEA Security Operations Center analysts supporting 24/7 incident investigation, containment, and response. The role owns regional shift coverage, operational processes, playbooks, quality assurance, analyst training, career development, and service-level performance. It partners with Product, Support, and security teams to improve workflows, automate analyst capabilities, operationalize new services, and track OKRs. The manager also provides technical leadership, stakeholder guidance, and participates in public speaking engagements.