Associate Triage Analyst

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.

Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.

As an Associate Triage Analyst, you will join the Triage Team, the critical entry point into the Huntress Security Operations Center (SOC). Your primary mission is to review high-volume security signals to identify potential threats that automated systems cannot yet fully qualify.

You will serve as a human filter for our senior Analysis team, applying rapid critical thinking to distinguish between benign system noise and genuine malicious activity. This role is designed as a talent incubator; you will immerse yourself in security fundamentals, shadow senior analysts, and participate in a structured learning program designed to prepare you for a career in advanced security analysis.

• →Data Review & Qualification: Rapidly assess incoming security signals from a dedicated queue, using established playbooks to determine if activity is "benign" or "potentially malicious."
• →Noise Reduction: Dismiss signals determined to be non-actionable or benign to prevent alert fatigue for the senior Analysis team.
• →Incident Escalation: Categorize and tag qualified threats, creating investigation tickets that provide clear, concise initial context for the Analysis team.
• →Continuous Learning: Actively participate in training modules, labs, and certification programs to build foundational security knowledge.
• →Operational Shadowing: Shadow senior analysts to understand the full lifecycle of an investigation and prepare for future career advancement.
• →Process Feedback: Identify and document trends in noisy signal sources (e.g., specific software generating benign alerts) to help refine our detection tuning.

• Experience: 0-2 years of experience in IT or Cybersecurity, or equivalent practical skills gained through internships, bootcamps, or self-directed learning.
• Technical Fundamentals: A foundational understanding of operating systems (Windows/Mac), basic networking concepts (IPs, DNS, HTTP), and common security terminology.
• Analytical Mindset: A strong curiosity for how things work and the ability to follow logical workflows or playbooks to solve problems.
• Communication Skills: Clear written communication skills are essential for documenting findings and creating escalation tickets.
• Growth Orientation: Actively partner with the SOC team, with the long-term goal of advancing into a core security operations role.
• Certifications: Entry-level certifications such as CompTIA Security+, Network+, or similar are a plus, but a demonstrated passion for security is most important.