Jobs at Huntress

Lead the technical vision and architectural evolution of Huntress’s Core Platform. Build complex Ruby on Rails features, solve scaling challenges, manage cross-team dependencies, drive architectural decisions, and oversee system lifecycle and technical risk. Mentor engineers, establish engineering excellence, collaborate with managers and product leaders, and help teams adopt AI coding tools responsibly.

Lead the global Revenue Readiness function by establishing its strategy, operating model, governance, learning infrastructure, and multi-year roadmap. Build scalable onboarding, enablement, reinforcement, content, measurement, and change-readiness programs across revenue teams. Advise senior GTM leaders, prioritize investments, coordinate cross-functional initiatives, manage the learning ecosystem, and develop the Revenue Readiness team in a scaling B2B SaaS organization.

Partners with go-to-market leaders to analyze sales performance, pipeline, forecasts, seller productivity, and operational metrics. Leads cross-functional initiatives, improves sales processes, CRM hygiene, CPQ practices, reporting, workflows, and account coverage. Builds executive dashboards and practical recommendations, using Salesforce, spreadsheets, AI, automation, and analytics to improve sales execution and measurable business outcomes.

Administer learning and readiness platforms, including learning paths, assignments, cohorts, certifications, assessments, and reporting. Coordinate training calendars, launches, enrollment, facilitators, communications, onboarding programs, and learner follow-up. Maintain content governance, metadata, versioning, and archival standards. Produce dashboards tracking completion, proficiency, certifications, and readiness gaps while partnering cross-functionally to improve operational efficiency and learner experience.

Leads revenue accounting for a growing SaaS business, overseeing ASC 606 guidance, revenue close, technical accounting memos, audits, billing and revenue operations, internal controls, and order-to-cash improvements. Partners with Finance, Sales, Legal, Deal Desk, FP&A, Engineering, and Business Platform teams to scale systems and processes. Manages and develops the revenue accounting team while using AI to improve contract analysis, variance analysis, audit support, and workflow automation.

Develop and maintain high-fidelity detections across endpoints, identities, SIEM, and operating systems. Conduct hypothesis-driven threat hunts, translate intelligence and attacker tradecraft into detection rules, tune detection efficacy, investigate ambiguous activity, and escalate likely intrusions. Build hunting queries and dashboards, document findings, support incident reporting, contribute to security content, and use validated AI-assisted workflows for detection development and analysis.

Leads North American detection engineering and threat hunting operations, translating global strategy into regional roadmaps, scaling distributed technical teams, managing hiring and budgets, coordinating with Product and Engineering, and directing incident response during major security events. The role owns detection efficacy, performance metrics, cross-region collaboration, and the hunt-to-detect feedback loop while mentoring senior practitioners and advocating for security tooling and telemetry.

Lead complex incident response investigations involving active adversaries and serious intrusions. Reconstruct attacker activity across endpoint, identity, cloud, and network telemetry; develop timelines, root-cause narratives, and remediation guidance; communicate findings to technical and executive stakeholders; and support partner engagements. Create detections, playbooks, automations, technical notes, and threat intelligence while collaborating with Product, Engineering, and account-facing teams. Mentor responders and improve the scalability of Tactical Response operations.

Lead internal security incident response as the primary SOC escalation point. Responsibilities include incident triage and validation, tabletop and purple-team exercises, telemetry optimization, threat coverage improvements, post-incident reviews, remediation tracking, stakeholder reporting, and maintaining response playbooks and standards. The role partners with engineering, product security, detection engineering, and offensive security teams to improve organizational resilience.

Manage onboarding and ongoing success for cybersecurity partners, ensuring rapid deployment, adoption, training, and value realization. Collaborate with account managers, technical sales, and support teams to resolve deployment challenges, monitor account health, support renewals, follow up after security incidents, and improve partner processes. The role supports approximately 7–10 channel account managers and drives measurable onboarding and adoption outcomes.

Own the vision, roadmap, and delivery of internal SOC tooling, including analyst UX, response workflows, investigation models, and automation. Partner with SOC leadership, engineering, design, and product teams to transform manual processes into scalable workflows. Define requirements, interfaces, operational metrics, and investment cases while improving analyst throughput, time-to-close, and delivery repeatability. The role requires deep SOC operations knowledge, cybersecurity product management experience, and expertise building operator-facing platforms and AI-enabled products.

Build, monitor, and scale resilient cloud infrastructure across multi-region and multi-cloud environments. Develop Kubernetes controllers and infrastructure tools using Go, Python, Ruby, and Terraform; maintain Datadog observability; diagnose complex production performance and reliability issues; automate failover and capacity management; and collaborate with engineering teams on architecture and infrastructure improvements.

Provides partner-facing support for cybersecurity incidents through email, chat, and phone. Triages SOC queues, troubleshoots security and product questions, translates findings into practical guidance, coordinates escalations, supports high-severity incident calls, documents investigations, manages follow-ups, and contributes to knowledge-base and process improvements. The role includes scheduled live coverage and occasional weekend or on-call support.

Monitor and investigate cybersecurity alerts, analyze endpoint telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity, then coordinate threat remediation. The analyst also supports escalations, contributes to detection engineering and tuning, and collaborates across the SOC. The role requires knowledge of operating systems, enterprise administration, networking, web security, attacker techniques, and malware analysis while working a remote weekend 4x10 shift after training.

The Sales Development Representative conducts outbound prospecting to internal IT departments and channel partners through phone, email, and LinkedIn. Responsibilities include building pipelines, qualifying prospects, setting product demos, supporting Account Executives, meeting sales quotas, maintaining accurate Salesforce records, and learning cybersecurity solutions. The role also involves exploring AI tools for prospect research, prioritization, outreach preparation, and follow-up in a remote environment.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

Manage and grow cybersecurity service provider partnerships through expansion, renewals, adoption, and retention. Serve as a trusted advisor to multiple stakeholders, achieve quota, improve partner satisfaction, and strengthen long-term loyalty. Use Salesforce or similar CRM tools and AI applications for account preparation, meeting summaries, organization, and follow-up. The role is a remote, high-visibility individual contributor position focused on MSP and channel partner success.

Provides entry-level, partner-facing SOC support by triaging security queues, communicating incident guidance, troubleshooting cybersecurity and product questions, coordinating escalations, documenting investigations, and following up through resolution. The role supports incident calls, live phone or chat coverage, knowledge-base improvements, cross-functional collaboration, and occasional weekend or on-call coverage. It requires clear communication, sound judgment, foundational cybersecurity knowledge, and organized remote work.

Build and manage Huntress’s Security Quality Management System for agentic and human-led SOC investigations. Establish sampling methods, review cadences, quality standards, validation criteria, scorecards, and reporting. Independently assess investigation decisions, identify drift and recurring failures, lead root-cause analysis, validate corrective actions, and improve security operations in partnership with Analysis, Product, Engineering, and Security Operations. Initially hands-on, the role is expected to grow into leadership of the QMS function.

Lead modernization of high-throughput cybersecurity detection engines and event pipelines in Go. Own distributed-system reliability, observability, liveness monitoring, load management, schema standards, drift detection, migration validation, and safe cutovers. Provide hands-on technical leadership across teams, set platform direction, write and review production code, and support Sigma-based detection capabilities. Collaborate across a broad stack including Kafka, Temporal, Redis, ClickHouse, Elasticsearch, Kubernetes, cloud platforms, and Ruby on Rails.