Huntress
Security Operations Analyst – UK
Remote, United Kingdom· REMOTE
About the role
The analyst responds to alerts in a 24/7 SOC, investigating EDR telemetry, forensic artifacts and malware across Windows, Linux and macOS. The role also covers cloud and Microsoft 365 investigations and contributes to detection improvements.
What you will do
- Triage, investigate and respond to platform alerts
- Review EDR/SIEM telemetry and forensic artifacts to find root cause
- Perform tactical malware analysis
- Investigate suspicious Microsoft 365 / cloud activity
- Contribute to detection creation and tuning
What they ask for
- 2+ years in a SOC or DFIR role
- Knowledge of Windows, Linux and macOS attack surfaces
- Familiarity with attacker tools and MITRE ATT&CK
- Static and dynamic malware analysis
- Windows administration and networking fundamentals
- Remote within the UK
Nice to have
- MSP/MSSP/MDR experience
- Linux and macOS investigation skills
- Scripting (PowerShell, Python, Bash, etc.)
- HackTheBox, TryHackMe or Blue Team Labs Online
- CTF or CCDC participation
What applying with Rooted means
This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.
Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.
You can read this role without an account. To apply you need a Rooted credential.
This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Huntress. Confirm the final details with the original source or during the application process.
Posted 2026-08-07