Jobs at Huntress

Provides entry-level, partner-facing SOC support by triaging security queues, communicating incident guidance, troubleshooting cybersecurity and product questions, coordinating escalations, documenting investigations, and following up through resolution. The role supports incident calls, live phone or chat coverage, knowledge-base improvements, cross-functional collaboration, and occasional weekend or on-call coverage. It requires clear communication, sound judgment, foundational cybersecurity knowledge, and organized remote work.

Support sales by providing technical product expertise, demonstrate Huntress platform, assess customer security posture, highlight risks, collaborate with Sales, Marketing, Support, and Engineering, and travel ~15% to meet customers.

Build and manage Huntress’s Security Quality Management System for agentic and human-led SOC investigations. Establish sampling methods, review cadences, quality standards, validation criteria, scorecards, and reporting. Independently assess investigation decisions, identify drift and recurring failures, lead root-cause analysis, validate corrective actions, and improve security operations in partnership with Analysis, Product, Engineering, and Security Operations. Initially hands-on, the role is expected to grow into leadership of the QMS function.

Lead modernization of high-throughput cybersecurity detection engines and event pipelines in Go. Own distributed-system reliability, observability, liveness monitoring, load management, schema standards, drift detection, migration validation, and safe cutovers. Provide hands-on technical leadership across teams, set platform direction, write and review production code, and support Sigma-based detection capabilities. Collaborate across a broad stack including Kafka, Temporal, Redis, ClickHouse, Elasticsearch, Kubernetes, cloud platforms, and Ruby on Rails.

Manage a high-volume portfolio of service provider partners, identify expansion opportunities, prospect stakeholders, support partner-led sales cycles, conduct product demonstrations, and drive adoption of Huntress managed security solutions. Track pipeline and engagement activity, collaborate with sales engineering and internal teams, enable partners, and use AI tools for account preparation, follow-up, and meeting summaries.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Provides technical product expertise and presentations to prospective customers, helping improve their security posture and positioning Huntress solutions. Partners with Sales, Marketing, Support, and Engineering to identify customer needs and product improvements. Reviews security issues with technical teams, supports MSP and VAR customers, and travels approximately 25% to meet customers.

Supports employee experience through company offsites, virtual events, and day-to-day workplace coordination. Serves as a key contact for event questions, manages onsite transportation and activity logistics, monitors virtual event communications, and provides office support for shipments, inventory, and Shopify tasks. Requires strong organization, service orientation, initiative, attention to detail, and comfort using AI tools. Travel may comprise up to 60% of the role.

Executive leader responsible for strategy, organization, and outcomes for Threat Detection & Response across SOC, detection engineering, threat hunting, triage, and response. Build multi-year roadmap toward an agentic SOC, partner with Product/Engineering/Data, drive metrics (MTTx, detection coverage/quality), lead cultural change, and develop a deep leadership bench to operate under high-pressure incidents.

Manage and grow relationships with channel partners (MSPs) to drive expansion, retention, and satisfaction. Meet quota through renewals and upsells, act as trusted advisor, and deliver cybersecurity solutions via the Huntress platform while collaborating cross-functionally to support partner success.

Lead product strategy and execution for ITDR and ISPM offerings, manage a small product team, drive discovery through launch, collaborate with engineering, design, sales, and marketing, and measure product success with business metrics.

As a Staff Product Manager, you'll drive the strategy and success of SIEM products, collaborating with various teams to fulfill customer needs and market demands while focusing on security for SMBs.

Lead technical architect and hands-on principal engineer for the SOC Experience team, building scalable investigation workflows, agentic LLM features, automation, remediation actions, and analyst tooling. Drive architecture, mentor engineers, prototype solutions, ensure reliability and observability, and partner with product, UX, and SOC stakeholders to turn operational problems into auditable, production-grade systems.

Lead research to detect Windows threats and develop sensor/telemetry capabilities. Collaborate with engineering and product teams to implement detections, investigate false positives/negatives, apply AI to research workflows, produce technical documentation, and mentor others while promoting the company externally.

Lead technical vision and implement high-impact Ruby on Rails solutions for an internal demo platform. Improve reliability, observability, instrumentation, and integrations; partner with Product, Sales, and cross-functional teams; mentor engineers and drive architecture, testing, and engineering best practices.

Lead design, development, and delivery of mission-critical SIEM platform features. Define technical vision, own quality and uptime, mentor engineers, collaborate cross-functionally, build AI-assisted workflows, and drive performance, monitoring, and architecture decisions.

Lead multiple platform engineering teams to build scalable, high-volume SaaS infrastructure for security products. Drive technical roadmap, SRE and developer-experience best practices, integrate AI tooling, hire and coach managers, measure engineering performance, and partner with product and architecture to deliver iterative customer value.

Lead technical design and implementation of the ISPM product using Ruby on Rails. Build scalable data pipelines and systems to process large-scale identity telemetry, collaborate with security researchers and product teams, mentor engineers, and set architectural direction for detection and remediation features.

Build and lead development of the ESPM platform using Ruby on Rails. Define technical vision, design scalable data pipelines and architectures for petabyte-scale ingestion, implement features across the stack, collaborate with security researchers, mentor engineers, and ensure high-quality, tested deliveries.

Design and produce visual assets and storyboards for interactive, game-like security awareness training. Lead visual development for simulations from concept through production, collaborate cross-functionally, create reusable asset systems, prototype and playtest mechanics, and define metrics to measure engagement and learning outcomes.