Anduril
Security Operations Analyst
$147K–$196K
Seattle, Washington, United States +1 · Full-time · Posted Aug 21, 2026
- Location
- Seattle, Washington, United States
Costa Mesa, California, United States
About the job
Monitors and responds to security threats, improves detections and response automation, and hunts for anomalous activity across Anduril’s systems.
What you'll do
- Triage alerts and investigate incidents across endpoints, cloud infrastructure, networks, and SaaS applications; participate in on-call response.
- Build and tune detection signatures, playbooks, and automation, incorporating feedback to reduce false positives.
- Conduct threat hunting and data baselines, collaborate on threat modeling, and communicate findings to stakeholders.
What they ask for
- Experience in security monitoring, log analysis, and detection engineering across large data sets and varied log sources.
- Python development experience contributing to a shared codebase for SOC automation.
- Experience with one or more SIEM languages: SPL, KQL, or SQL; experience analyzing data in a data lake environment.
- Broad practical security knowledge, attacker TTP knowledge, strong collaboration and communication skills, and ability to obtain and hold a U.S. Top Secret security clearance.
Nice to have
- Cloud incident response experience with AWS, Azure, or GCP.
- Digital forensics and/or reverse engineering experience.
Pay
$147,000 — $196,000 USD (base salary)
Tools
Python, SPL, KQL, SQL, Windows, Linux, MacOS, AWS/Azure
Model-written summary · the original posting is authoritative