Security Operations Analyst

Anduril Industries

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Costa Mesa, CA
Salary: $147,000–$196,000 / yr
Posted: 67 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $150k

This role $172k

$98k $206k

below market most similar roles pay here above market

This role pays more than 69% of similar roles. Most pay $122,275–$178,037 — the blue band above. At the midpoint, this role pays about $172k versus about $150k for comparable roles.

Based on 240 similar postings.

Employer

About Anduril Industries

Anduril Industries is a defense technology company that builds advanced hardware and software systems for national security, including autonomous drones, surveillance systems, and the Lattice AI command platform.

Anduril Industries currently has 901 open roles on FindRole.

Listed pay typically runs $166,000–$220,000 across 858 roles with salary data.

Most-posted roles

View all roles at Anduril Industries

At a glance

TL;DR · Security Operations Analyst

Role Posting Log in to save

The Security Operations Analyst joins the Detection and Response team to monitor and respond to adversarial activity across critical defense technologies. This role involves triaging alerts related to phishing, endpoints, cloud infrastructure, and SaaS applications while building tailored detection signatures and response playbooks using detection-as-code principles. The analyst will conduct threat hunting, data normalization, and threat modeling to identify anomalies and improve security controls. Key technical requirements include experience in security monitoring, log analysis, and detection engineering within large data sets. Candidates must possess Python development skills for automating SOC operations, proficiency in SIEM languages like SPL, KQL, or SQL, and knowledge of attacker TTPs across Windows, Linux, MacOS, and AWS/Azure environments. The position requires a U.S. Top Secret security clearance.

Skills

Python SQL KQL SPL AWS Azure GCP SIEM Detection-as-Code Incident Response Threat Hunting Digital Forensics Reverse Engineering Linux Windows MacOS Cloud Infrastructure Data Lake TTPs

What you'll do

Triage and respond to security incidents involving phishing, endpoints, cloud infrastructure, and SaaS applications.
Build and optimize detection signatures, response playbooks, and automation using detection-as-code principles.
Lead the feedback loop for detections to fine-tune alerts and reduce false positives.
Participate in threat modeling scenarios to identify weaknesses and incorporate findings into security controls.
Conduct threat hunting and data baselines to identify anomalous patterns in large data sets.
Participate in an on-call rotation to respond to security events and conduct incident investigations.
Serve as an incident commander to lead large-scale responses and communicate findings to stakeholders.
Mentor and guide junior analysts on detection and response maturity.

What we're looking for

Experience in security monitoring, log analysis, and detection engineering across endpoint, network, and application log sources.
Experience in Python development for automating SOC operations within a shared codebase.
Experience with one or more SIEM languages such as SPL, KQL, or SQL.
Experience conducting analysis in a data lake environment.
Broad practical security knowledge across endpoint, network, identity, application, and cloud infrastructure.
Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS, and Azure.
Strong communication skills and experience collaborating with internal and external stakeholders.
Must be able to obtain and hold a U.S. Top Secret security clearance.
Experience conducting incident response in the Cloud (AWS, Azure, GCP) (preferred).
Digital Forensics and/or reverse engineering experience (preferred).

Similar roles

Security Operations Analyst

Anduril Industries

Boston, MA +1 67 days ago $147,000–$196,000

Python SQL KQL SPL AWS Azure GCP SIEM Detection-as-Code Incident Response Threat Hunting Digital Forensics Reverse Engineering Linux Windows MacOS Data Lake TTPs

Save

Security Operations Analyst

Anduril Industries

Seattle, WA +1 67 days ago $147,000–$196,000

Python SQL KQL SPL AWS Azure GCP SIEM Detection-as-Code Incident Response Threat Hunting Digital Forensics Reverse Engineering Linux Windows MacOS Cloud Infrastructure Data Lake

Save

Security Operations Analyst

Anduril Industries

Washington, District of Columbia +1 67 days ago $147,000–$196,000

Python SQL KQL SPL AWS Azure GCP SIEM Detection-as-Code Incident Response Threat Hunting Digital Forensics Reverse Engineering Linux Windows MacOS Data Normalization

Save

Security Operations Center Analyst, Senior

Booz Allen Hamilton

Fort Meade, MD 56 days ago

Microsoft Sentinel KQL Python SIEM Incident Response Threat Hunting Detection Engineering Malware Analysis Digital Forensics Cloud Security Networking MITRE ATT&CK NIST SP 800-53 NIST SP 800-82 Operational Technology Red Canary

8+ yrs exp

Save

Security Operations Analyst

Booz Allen Hamilton

Huntsville, AL 33 days ago $61,900–$141,000

Cyber Kill Chain MITRE ATT&CK Microsoft Sentinel Splunk DCAP Incident Response SOC Operations Cyber Network Operations GIAC GMON GCIH GCFA GCIA GNFA GCTD GCFR

1+ yrs exp

Save

Security Operations Analyst, Mid

Booz Allen Hamilton

Huntsville, AL 47 days ago

Incident Response SOC Operations MITRE ATT&CK Microsoft Sentinel Splunk DCAP Cyber Kill Chain Intelligence Driven Defense Cloud Threat Detection Cyber Network Operations Computer Incident Response Team

5+ yrs exp

Save