Top Cybersecurity Jobs in Los Angeles, CA

Monitor and investigate cybersecurity alerts, analyze endpoint telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity, then coordinate threat remediation. The analyst also supports escalations, contributes to detection engineering and tuning, and collaborates across the SOC. The role requires knowledge of operating systems, enterprise administration, networking, web security, attacker techniques, and malware analysis while working a remote weekend 4x10 shift after training.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

Provides entry-level, partner-facing SOC support by triaging security queues, communicating incident guidance, troubleshooting cybersecurity and product questions, coordinating escalations, documenting investigations, and following up through resolution. The role supports incident calls, live phone or chat coverage, knowledge-base improvements, cross-functional collaboration, and occasional weekend or on-call coverage. It requires clear communication, sound judgment, foundational cybersecurity knowledge, and organized remote work.

Support sales by providing technical product expertise, demonstrate Huntress platform, assess customer security posture, highlight risks, collaborate with Sales, Marketing, Support, and Engineering, and travel ~15% to meet customers.

Build and manage Huntress’s Security Quality Management System for agentic and human-led SOC investigations. Establish sampling methods, review cadences, quality standards, validation criteria, scorecards, and reporting. Independently assess investigation decisions, identify drift and recurring failures, lead root-cause analysis, validate corrective actions, and improve security operations in partnership with Analysis, Product, Engineering, and Security Operations. Initially hands-on, the role is expected to grow into leadership of the QMS function.

Lead modernization of high-throughput cybersecurity detection engines and event pipelines in Go. Own distributed-system reliability, observability, liveness monitoring, load management, schema standards, drift detection, migration validation, and safe cutovers. Provide hands-on technical leadership across teams, set platform direction, write and review production code, and support Sigma-based detection capabilities. Collaborate across a broad stack including Kafka, Temporal, Redis, ClickHouse, Elasticsearch, Kubernetes, cloud platforms, and Ruby on Rails.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Executive leader responsible for strategy, organization, and outcomes for Threat Detection & Response across SOC, detection engineering, threat hunting, triage, and response. Build multi-year roadmap toward an agentic SOC, partner with Product/Engineering/Data, drive metrics (MTTx, detection coverage/quality), lead cultural change, and develop a deep leadership bench to operate under high-pressure incidents.

Lead product strategy and execution for ITDR and ISPM offerings, manage a small product team, drive discovery through launch, collaborate with engineering, design, sales, and marketing, and measure product success with business metrics.

Lead technical architect and hands-on principal engineer for the SOC Experience team, building scalable investigation workflows, agentic LLM features, automation, remediation actions, and analyst tooling. Drive architecture, mentor engineers, prototype solutions, ensure reliability and observability, and partner with product, UX, and SOC stakeholders to turn operational problems into auditable, production-grade systems.