Anduril
Security Operations Analyst
$147K–$196K
Costa Mesa, California, United States · Full-time · Posted Aug 21, 2026
About the job
Monitor and respond to security threats, improve detections and response automation, and conduct threat hunting and incident investigations across Anduril’s systems.
What you'll do
- Triage and investigate alerts and incidents across endpoints, cloud infrastructure, and SaaS applications; participate in an on-call rotation.
- Build and refine detection signatures, response playbooks, and automation, incorporating feedback to reduce false positives.
- Conduct threat hunting and data baselining, collaborate on threat modeling, and communicate incident findings to stakeholders.
What they ask for
- Experience in security monitoring, log analysis, and detection engineering across large datasets and varied log sources.
- Python development experience contributing to a shared codebase for SOC automation.
- Experience with one or more SIEM languages: SPL, KQL, or SQL; and experience analyzing data in a data lake environment.
- Broad practical security knowledge and attacker TTP knowledge; strong communication and collaboration skills; must be able to obtain and hold a U.S. Top Secret security clearance.
Nice to have
- Cloud incident response experience with AWS, Azure, or GCP.
- Digital forensics and/or reverse engineering experience.
Pay
$147,000 — $196,000 USD (base salary)
Tools
Python, SPL, KQL, SQL, Windows, Linux, MacOS, AWS/Azure
Model-written summary · the original posting is authoritative