Anduril
Security Operations Analyst
$147K–$196K
Washington, District of Columbia, United States +1 · Full-time · Posted Aug 21, 2026
- Location
- Washington, District of Columbia, United States
Costa Mesa, California, United States
About the job
Monitors and responds to security threats, improves detections and response automation, and conducts threat hunting across Anduril’s systems and data.
What you'll do
- Triage alerts and investigate incidents across endpoints, cloud infrastructure, and SaaS applications; participate in on-call response.
- Build and refine detection signatures, playbooks, and response automation, incorporating feedback to reduce false positives.
- Conduct threat hunting and data baselining, and collaborate with stakeholders on threat modeling and security controls.
What they ask for
- Experience in security monitoring, log analysis, and detection engineering across large data sets and diverse log sources.
- Python development experience contributing to a shared codebase for SOC automation.
- Experience with one or more SIEM languages: SPL, KQL, or SQL; and analysis in a data lake environment.
- Broad practical security knowledge, familiarity with attacker TTPs, strong communication and collaboration skills, and ability to obtain and hold a U.S. Top Secret security clearance.
Nice to have
- Cloud incident response experience with AWS, Azure, or GCP.
- Digital forensics and/or reverse engineering experience.
Pay
$147,000 — $196,000 USD (base salary)
Tools
Python, SPL, KQL, SQL, AWS, Azure, GCP, Lattice OS
Model-written summary · the original posting is authoritative