Jobs at Huntress

Build and operate an agentic SOC investigation platform using LLMs, including telemetry tools, investigation workflows, evidence-backed outputs, evaluation systems, and analyst productivity features. Develop secure, reliable, observable backend services that handle attacker-influenced data across customer environments. Collaborate with SOC analysts, researchers, technical leads, and product managers to translate investigative expertise into production agent behavior.

Lead full-stack development for Huntress’s SOC platform, building analyst-facing investigation, triage, remediation, queueing, and customer reporting experiences. Shape architecture, data models, interfaces, security practices, reliability, observability, and testing while mentoring engineers and partnering with Product, UX, and SOC stakeholders. The role emphasizes Ruby on Rails, modern frontend development, cloud infrastructure, relational databases, and technical leadership across complex cybersecurity software products.

Lead the architecture and development of a production Agentic SOC that uses LLM-based agents to investigate security signals, gather evidence, make defensible decisions, and support SOC analysts. Own agent behavior, tool use, evaluation, guardrails, tenant isolation, auditability, reliability, and autonomous decision-making. Collaborate with analysts, detection engineers, product, and engineering teams while providing technical leadership and mentoring. Build scalable backend systems using distributed workflows, queues, cloud infrastructure, and data stores.

Administer the company’s equity program in Carta, maintaining cap table and award records from grant approval through employee departures. Reconcile equity data with payroll and accounting records, resolve discrepancies, coordinate transactions across Legal, Finance, People, payroll, and leadership, and support reporting, audits, valuations, and board materials. Provide clear employee guidance, strengthen controls and procedures, and use AI tools responsibly while protecting confidential information.

Lead integrated product strategy for Core Platform and Platform Value, owning shared services such as identity, SSO, RBAC, accounts, audit logging, APIs, and partner-facing reporting and dashboard experiences. Drive user research, UX design, roadmap prioritization, technical platform investments, measurable outcomes, and cross-functional alignment. Serve as a hands-on Staff-level individual contributor supporting MSPs and their clients while mentoring product management practices.

Provides technical product expertise and presentations to prospective customers, helping improve their security posture and positioning Huntress solutions. Partners with Sales, Marketing, Support, and Engineering to identify customer needs and product improvements. Reviews security issues with technical teams, supports MSP and VAR customers, and travels approximately 25% to meet customers.

Lead FP&A and strategic finance for a high-growth SaaS company. Own long-term planning, forecasting, scenario modeling, variance analysis, investment cases, executive financial narratives, and sales compensation administration. Partner with GTM, Product, and functional leaders to drive decisions, build and scale the FP&A team, modernize planning workflows with AI, and maintain strong financial controls, governance, and data confidentiality.

Own the full mid-market sales cycle, including prospecting, discovery, solution positioning, pricing, forecasting, and closing net-new opportunities. Meet revenue targets, maintain accurate CRM records, research competitors, and partner with sales engineering, operations, product management, and account management. Build trusted customer relationships, use feedback to improve strategy, and apply AI tools to streamline sales workflows. Travel up to 10% to events and customers.

Own full-cycle recruiting for engineering, product, design, IT, security, and leadership roles. Partner with hiring managers, develop sourcing strategies, assess candidates, manage interview processes, and provide recruiting analytics. Build AI-supported recruiting workflows, maintain job postings, and support diversity, inclusion, and employer branding initiatives while delivering a candidate-centric experience.

Lead the technical vision and architectural evolution of Huntress’s Core Platform. Build complex Ruby on Rails features, solve scaling challenges, manage cross-team dependencies, drive architectural decisions, and oversee system lifecycle and technical risk. Mentor engineers, establish engineering excellence, collaborate with managers and product leaders, and help teams adopt AI coding tools responsibly.

Partners with go-to-market leaders to analyze sales performance, pipeline, forecasts, seller productivity, and operational metrics. Leads cross-functional initiatives, improves sales processes, CRM hygiene, CPQ practices, reporting, workflows, and account coverage. Builds executive dashboards and practical recommendations, using Salesforce, spreadsheets, AI, automation, and analytics to improve sales execution and measurable business outcomes.

Develop and maintain high-fidelity detections across identity, endpoint, SIEM, and operating-system environments. Conduct hypothesis-driven threat hunts across large-scale telemetry, translate threat intelligence and investigations into detection rules, tune detection efficacy, investigate ambiguous attacker activity, and escalate likely intrusions with clear incident reports. The role also involves building hunting queries and dashboards, contributing to security content, and validating AI-assisted analysis and detection workflows.

Develop and manage reseller and distributor partnerships across Australia and New Zealand. Recruit, onboard, train, and coach partners; create channel sales strategies; establish targets and incentives; manage opportunity registration and margin allocation; drive joint marketing campaigns and events; track performance; and provide market feedback. The role requires strong cybersecurity market knowledge, reseller relationships, remote territory management, and travel throughout ANZ.

Leads revenue accounting for a growing SaaS business, overseeing ASC 606 guidance, revenue close, technical accounting memos, audits, billing and revenue operations, internal controls, and order-to-cash improvements. Partners with Finance, Sales, Legal, Deal Desk, FP&A, Engineering, and Business Platform teams to scale systems and processes. Manages and develops the revenue accounting team while using AI to improve contract analysis, variance analysis, audit support, and workflow automation.

Generate and qualify inbound and outbound leads across Australia, engage managed service providers through phone and email, communicate Huntress’s value proposition, and book qualified meetings for Account Executives. Maintain accurate CRM records, conduct high-volume outreach, collaborate with sales management on targeting and messaging, and contribute to process improvements, training, and technology adoption.

Develop and maintain high-fidelity detections across endpoints, identities, SIEM, and operating systems. Conduct hypothesis-driven threat hunts, translate intelligence and attacker tradecraft into detection rules, tune detection efficacy, investigate ambiguous activity, and escalate likely intrusions. Build hunting queries and dashboards, document findings, support incident reporting, contribute to security content, and use validated AI-assisted workflows for detection development and analysis.

Leads North American detection engineering and threat hunting operations, translating global strategy into regional roadmaps, scaling distributed technical teams, managing hiring and budgets, coordinating with Product and Engineering, and directing incident response during major security events. The role owns detection efficacy, performance metrics, cross-region collaboration, and the hunt-to-detect feedback loop while mentoring senior practitioners and advocating for security tooling and telemetry.

Lead complex incident response investigations involving active adversaries and serious intrusions. Reconstruct attacker activity across endpoint, identity, cloud, and network telemetry; develop timelines, root-cause narratives, and remediation guidance; communicate findings to technical and executive stakeholders; and support partner engagements. Create detections, playbooks, automations, technical notes, and threat intelligence while collaborating with Product, Engineering, and account-facing teams. Mentor responders and improve the scalability of Tactical Response operations.

Investigate and respond to cybersecurity alerts and hands-on intrusions in a managed SOC. Analyze EDR and SIEM telemetry, logs, forensic artifacts, malware, Microsoft 365, and Google Workspace activity. Provide remediation guidance, tune detections, support escalations, and collaborate with Product and Engineering teams to improve MDR capabilities and security workflows.

Lead internal security incident response as the primary SOC escalation point. Responsibilities include incident triage and validation, tabletop and purple-team exercises, telemetry optimization, threat coverage improvements, post-incident reviews, remediation tracking, stakeholder reporting, and maintaining response playbooks and standards. The role partners with engineering, product security, detection engineering, and offensive security teams to improve organizational resilience.