Teams at Huntress

Lead complex incident response investigations involving active adversaries and serious intrusions. Reconstruct attacker activity across endpoint, identity, cloud, and network telemetry; develop timelines, root-cause narratives, and remediation guidance; communicate findings to technical and executive stakeholders; and support partner engagements. Create detections, playbooks, automations, technical notes, and threat intelligence while collaborating with Product, Engineering, and account-facing teams. Mentor responders and improve the scalability of Tactical Response operations.

Lead internal security incident response as the primary SOC escalation point. Responsibilities include incident triage and validation, tabletop and purple-team exercises, telemetry optimization, threat coverage improvements, post-incident reviews, remediation tracking, stakeholder reporting, and maintaining response playbooks and standards. The role partners with engineering, product security, detection engineering, and offensive security teams to improve organizational resilience.

Manage onboarding and ongoing success for cybersecurity partners, ensuring rapid deployment, adoption, training, and value realization. Collaborate with account managers, technical sales, and support teams to resolve deployment challenges, monitor account health, support renewals, follow up after security incidents, and improve partner processes. The role supports approximately 7–10 channel account managers and drives measurable onboarding and adoption outcomes.