Welcome to Huntress, where small and mid-market businesses come for protection from today's determined hackers.

Technology alone won't be able to keep businesses and IT service providers safe. If you want to get rid of a hacker, you're going to have to think like one. 

The Huntress Managed Security Platform combines the best minds in cybersecurity to stop advanced cyberattacks and find hackers hiding in your environments—all at a cost that makes sense. 

Experience simplicity with a suite of human-powered solutions like:
 - Managed endpoint detection and response (EDR) backed by a global security operations team
 - Detailed incident reports with assisted remediation that make it easy for teams to respond to security incidents 
 - Powerful antivirus, ransomware detection and host isolation to strengthen protection and swiftly respond to active threats
 - Security Awareness Training (SAT) to help employees become their own line of defense
 - Enjoying your peace of mind

Ready to be part of the 1.6+ million devices across the globe safeguarded by Huntress?

huntress

<div class="content-intro">
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
</div>Reports to: Engineering Manager
Location: Remote US
Compensation Range: $200,000 - $220,000 base plus bonus and equity&nbsp; &nbsp;
&nbsp;
What We Do:&nbsp;
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
What You’ll Do:
The Huntress team seeks a Staff Software Engineer to join our SOC Experience team. This team builds the human-analyst side of Huntress’ SOC platform: the investigation and triage experience analysts use to work a case, the remediation actions they take, the queues that route and prioritize incoming work, and the customer-facing reporting that closes the loop with customers. Your contributions will help Huntress improve analyst efficiency, reduce toil, and drive customer outcomes as we scale <a href="https://www.huntress.com/blog/scaling-to-protect-the-99">protection for the 99%</a>.
As a Staff Software Engineer, you’ll provide technical leadership across this surface area: shaping architecture and design direction, converting ambiguous requirements into functional workflows and data models, raising the bar on code quality and testing, and mentoring engineers across the team. You’ll partner closely with Product, UX, and SOC stakeholders to turn operational pain points into reliable, auditable systems, and you’ll go deep in the code yourself. This is a full-stack role with real front-end weight: the analyst experiences you’ll build are data-dense, interactive interfaces, and you’ll set the bar for front-end quality as well as the back end.&nbsp;
Responsibilities:
<ul>
<li>Provide technical leadership across the SOC Experience surface area: investigation and triage experience, remediation actions, queues, and customer-facing reporting.</li>
<li>Lead and develop high-quality software, software designs, and architecture</li>
<li>Design and build analyst-facing interfaces end to end, from data model to browser, and set the standard for front-end quality (usability, performance, accessibility, reusable patterns) in partnership with UX</li>
<li>Set the standard for engineering excellence on the team through code review, test plan review, and hands-on pairing</li>
<li>Lead security-by-design reviews of designs and code</li>
<li>Focus on the full lifecycle of the systems you build, including evolution, configuration, and risk management, not just initial delivery</li>
<li>Share ownership of delivery, reliability, and uptime for the features you build, with observability and test automation built in</li>
<li>Mentor engineers across the team to help them grow into harder problems</li>
<li>Balance technical rigor with pragmatism: push back when a shortcut creates real risk, and push back on over-engineering when the goal is discovery or speed</li>
<li>Partner with Product, UX, and SOC stakeholders to turn operational pain points into reliable, auditable systems</li>
</ul>
What You Bring To The Team:
<ul>
<li>10+ years of experience developing complex software products</li>
<li>5+ years of programming in Ruby on Rails</li>
<li>Strong front-end fundamentals (JavaScript, HTML, CSS) and experience building complex interactive UIs with modern component-based frameworks; today’s stack is Hotwire, Turbo, and Stimulus, but you can reason outside that box</li>
<li>Experience with AWS or other public cloud environments, and Linux-based infrastructure</li>
<li>Experience with relational databases such as Postgres&nbsp;</li>
<li>Experience with AI coding tools, such as Claude Code</li>
</ul>
Preferred Qualifications:
<ul>
<li>Experience with ClickHouse</li>
<li>Experience building cybersecurity products, or building/operating a SOC platforms</li>
<li>Experience with Hotwire, Stimulus, Turbo</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul>
&nbsp;&nbsp;
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.&nbsp;&nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.&nbsp;
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com. Please note that non-accommodation requests to this inbox will not receive a response.
If you have questions about your personal data privacy at Huntress, please visit our<a href="https://support.huntress.io/hc/en-us/articles/14695525600915-Candidate-Privacy-Notice"> privacy page</a>
#BI-Remote<div class="content-conclusion">
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our <a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;
</div>

Staff Software Engineer - SOC Platform (Ruby/Rails)

<div class="content-intro">
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
</div>Reports To: Director of Product Management, Platform Location: Remote US Compensation Range: $230,000 to $250,000 base, plus bonus and equity
What You’ll Do:&nbsp;
<ul>
<li>Set the integrated product vision and strategy for both the Core Platform and Platform Value teams in partnership with the Director of Product Management, engineering leadership, design, customer-facing teams, and other product leaders.</li>
<li>Own and communicate a roadmap that balances shared platform foundations with partner-visible value, including clear sequencing, tradeoffs, dependencies, and investment cases.</li>
<li>Lead strategy and discovery across platform capabilities such as identity and SSO, RBAC, accounts and organizations, audit logging, shared services, product enablement, and platform system-of-record concerns.</li>
<li>Lead strategy and discovery across partner-facing experiences such as reporting, reporting delivery and sharing, dashboards, onboarding, action workflows, cross-product views, and other experiences that help partners demonstrate and act on Huntress value.</li>
<li>Treat MSPs and their clients as first-class users: understand their operating models, workflows, permissions, organizational structures, reporting needs, and jobs to be done.</li>
<li>Partner closely with design to research user problems, test concepts, produce wireframes and prototypes, and build intuitive experiences for complex technical workflows.</li>
<li>Bring a strong UX point of view to platform work, ensuring that backend capability is paired with an experience that users can understand and successfully complete.</li>
<li>Translate ambiguous customer, partner, and internal stakeholder needs into clear product outcomes, principles, requirements, epics, and user stories.</li>
<li>Work with engineers, architects, and designers to shape product specifications and technical approaches for durable, reusable platform capabilities.</li>
<li>Establish and steward interfaces, shared objects, APIs, and product contracts that enable other teams to build on the platform without bespoke implementation work.</li>
<li>Make platform investments legible to executive stakeholders by connecting technical work to customer outcomes, partner value, product velocity, operational efficiency, and business growth.</li>
<li>Establish measurable outcomes for both platform effectiveness and partner value, such as time to enable a new product, completion of identity and access workflows, report generation and sharing, dashboard adoption, and time to action.</li>
<li>Participate as a key contributor through the full product lifecycle, from discovery and research through delivery, launch, adoption, and iteration.</li>
<li>Protect capacity for reliability, usability, instrumentation, and technical debt while making disciplined tradeoffs against feature pressure.</li>
<li>Create alignment across Product, Engineering, Design, Support, Sales, Marketing, Security, and other stakeholders through clear written and verbal communication.</li>
<li>Mentor and raise the quality of product management practice through example, coaching, reusable approaches, and thoughtful product reviews, while remaining an individual contributor.</li>
</ul>
Responsibilities:&nbsp;
Huntress is building a unified platform that helps product teams ship faster, gives partners a more coherent experience, and makes the value of Huntress visible and actionable.
We are looking for a Staff Product Manager to lead the connected product strategy across Core Platform and Platform Value. This is one integrated platform leadership role.
You will own the shared foundations that products depend on and the user experiences through which partners understand, configure, and act on the value Huntress delivers. Your scope will include platform services and system-of-record surfaces such as identity, SSO, RBAC, accounts, organizations, auditability, product enablement, and shared platform capabilities. It will also include partner-facing experiences such as reporting, dashboards, onboarding, action workflows, and other surfaces that help MSPs demonstrate and operationalize security outcomes for their clients.
The role is especially important to Huntress because our customers are often managed service providers. You will need to understand the MSP business model, including how partners manage multiple organizations, delegate access, standardize workflows, demonstrate value to clients, and scale operations across their customer base.
This is a hands-on Staff-level individual contributor role. You will set direction, create clarity in ambiguous problem spaces, work deeply with engineering and design, and influence product teams across Huntress without relying on direct authority. You will operate at both strategic and executional altitude—from platform vision and investment cases to user research, prototypes, requirements, launches, and measurable outcomes.
What You Bring To The Team:&nbsp;
<ul>
<li>7+ years of experience in a product management role, with a track record of increasing scope and impact.</li>
<li>2+ years of direct experience with the MSP business model and workflows. You understand how service providers manage multiple customers, users, organizations, permissions, reporting, and operational scale.</li>
<li>3+ years of prior experience as a platform product manager, with ownership of shared services, backend systems, APIs, data models, or interfaces consumed by multiple product teams.</li>
<li>A demonstrated track record of building and launching platform capabilities—not only managing roadmaps or coordinating delivery.</li>
<li>Strong UX product management experience. You have personally led user research, workflow design, prototyping, usability testing, or the creation of customer-facing interfaces.</li>
<li>Experience building products for complex B2B users, administrators, operators, or technical professionals.</li>
<li>The ability to connect technical platform investments to clear user outcomes and business value.</li>
<li>Strong product judgment in ambiguous environments, including the ability to distinguish foundational platform work from one-off feature requests.</li>
<li>Experience working closely with engineering, architecture, and design teams to make difficult technical and product decisions.</li>
<li>Excellent written and verbal communication skills, including the ability to create clear product narratives, requirements, epics, and stories that align teams around intended outcomes.</li>
<li>Comfort operating as a hands-on individual contributor who can move between strategy, discovery, UX details, execution, and stakeholder leadership.</li>
<li>Experience working in an agile development environment using modern product and engineering tools.</li>
<li>Strong analytical, creative, and critical-thinking abilities, with comfort in defining metrics and using evidence to make prioritization decisions.</li>
<li>Experience in cybersecurity, SaaS, or another complex B2B technology environment; experience with products serving MSPs, MSSPs, or channel partners is required.</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul><div class="content-conclusion">
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our <a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;
</div>

Staff Product Manager, Core Platform & UX

<div class="content-intro">
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
</div>Reports to: Director, Engineering Location: Remote US, Only Compensation: $165,000 to $190,000 base plus bonus and equity
What You’ll Do:
Huntress is building an Agentic SOC. When our detection pipeline raises a signal, an LLM-based agent picks it up and investigates it end-to-end. It gathers telemetry across our products, reconstructs what happened, and makes a well-documented determination about whether the activity is malicious. Over time, it will take on more of the work itself, growing from resolving routine cases to acting fast when it finds an attack and handing analysts cases with the evidence already assembled.&nbsp;
This system is meant to augment our analysts, not replace them. It takes the high-volume, repetitive work off their plates so they can focus on complex cases and hands-on keyboard intrusions where human expertise matters most. It also reduces toil in the rest of their day by using LLMs to pre-process the output of the tools analysts use constantly, so they start from a clear picture instead of raw telemetry.
This isn’t a chatbot bolted onto a dashboard. The system investigates a large volume of signals a day across thousands of customer organizations. Many signals are benign, but some are live intrusions where minutes matter. The telemetry the system reads comes from environments where attackers are actively operating. Because the system makes real decisions, like closing an investigation or isolating a host, it has to be right, it has to show its work, and it has to know when to hand off to a person.
As a Senior Software Engineer on the Agentic SOC team, you’ll build and ship core parts of this system. You’ll work closely with the team’s technical leads, SOC analysts, product researchers, and product managers. You’ll own significant pieces end-to-end, from an ambiguous problem to a production feature you can show is working.
We make full use of AI coding tools to enable you to accelerate your development. We don’t cap token usage. We expect you to use AI and all tools responsibly.
&nbsp;
Responsibilities:
<ul>
<li>Build the investigation system. You design, build, and ship the components that make agentic investigation work: the tools agents use to query telemetry, the logic that drives an investigation, and the structured, evidence-backed output that analysts and customers see.</li>
<li>Turn analyst expertise into agent behavior. You sit with SOC analysts and product researchers to understand how they triage and investigate a given kind of Signal, then encode that into what the agent looks for, what it gathers, and how it explains its conclusions.</li>
<li>Take toil off analysts’ plates. You build LLM-powered features that pre-process the output of tools analysts use every day. They summarize, correlate, and highlight what matters, so analysts spend their time on judgment instead of assembly.</li>
<li>Measure what you ship. You build and extend the evaluations that tell us whether the system is getting better or worse, and you back your changes with evidence rather than a handful of good-looking examples.</li>
<li>Build with a security mindset. The agent reads attacker-influenced data, runs across thousands of customer tenants, and can take action in customer environments. You think about how what you build could be misused or manipulated, and you design for it.</li>
<li>Build for production. You write reliable, observable, cost-conscious code that behaves well when models are slow, wrong, or unavailable. You operate what you build and help keep the system healthy as new detections and products come online.</li>
<li>Collaborate and raise the bar. You give thoughtful code reviews, help teammates get unstuck, share what you learn about building with LLMs, and contribute to technical discussions and design reviews with clear reasoning about tradeoffs.</li>
<li>Balance rigor with pragmatism. You know when to prototype quickly to learn something and when to slow down because the cost of being wrong is high.</li>
</ul>
What You Bring To The Team:
<ul>
<li>6+ years of professional software development experience, including building and operating production backend systems</li>
<li>Experience building applications with LLMs, including tool use, structured output, prompt and context design, and evaluation. Experience shipping agents to production is a strong plus</li>
<li>An understanding of how LLM-based systems fail, and good habits for testing and debugging non-deterministic behavior</li>
<li>Solid backend fundamentals, including APIs, background jobs and queues, concurrency, relational databases such as Postgres, and data stores such as Redis</li>
<li>Strong skills in one or more backend languages and the ability to pick up new ones quickly. Our primary stack is Ruby on Rails. Prior Rails experience isn’t required, and we expect you to become fluent in it</li>
<li>Security awareness: you think about untrusted input, access control, and keeping one customer’s data separate from another’s</li>
<li>Curiosity about how security analysts think and work, and a willingness to spend real time learning from them</li>
<li>Experience with AWS, Azure, or other public cloud environments</li>
<li>Experience with AI coding tools, such as Claude Code</li>
<li>BS or MS in Computer Science or Engineering, or equivalent experience</li>
</ul>
Bonus Points:
<ul>
<li>Experience working in or building for a SOC, incident response, threat hunting, or detection engineering. It isn’t required, but it helps a lot, because we build these workflows around how our analysts actually investigate</li>
<li>Familiarity with endpoint, identity, and Microsoft 365 telemetry and with attacker tradecraft (e.g., MITRE ATT&amp;CK)</li>
<li>Experience building evaluation pipelines or datasets for ML or LLM systems</li>
<li>Experience with Ruby on Rails&nbsp;</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul>
&nbsp; #BI-REMOTE<div class="content-conclusion">
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our <a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;
</div>

Senior Software Engineer- Agentic SOC

<div class="content-intro">
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
</div>Reports to: Director, Engineering Location: Remote US, Only Compensation: $215,000 to $240,000 base plus bonus and equity
What You’ll Do:&nbsp;
Huntress is building an Agentic SOC. When our detection pipeline raises a signal, an LLM-based agent picks it up and investigates it end-to-end. It gathers telemetry across our products, reconstructs what happened, and makes a well-documented determination about whether the activity is malicious. Over time, it will take on more of the work itself, growing from resolving routine cases to acting fast when it finds an attack and handing analysts cases with the evidence already assembled. We’re hiring a Principal Software Engineer to head this effort.
This system is meant to augment our analysts, not replace them. It takes the high-volume, repetitive work off their plates so they can focus on complex cases and hands-on keyboard intrusions where human expertise matters most. It also reduces toil in the rest of their day by using LLMs to pre-process the output of the tools analysts use constantly, so they start from a clear picture instead of raw telemetry.
This isn’t a chatbot bolted onto a dashboard. The system investigates a large volume of signals a day across thousands of customer organizations. Many signals are benign, but some are live intrusions where minutes matter. The telemetry the system reads comes from environments in which attackers are actively operating. Because the system makes real decisions, like closing an investigation or isolating a host, it has to be right, it has to show its work, and it has to know when to hand off to a person.
As the technical lead, you’ll own the system’s architecture and direction. That means deciding how an investigation is structured, where deterministic code ends and model reasoning begins, what the agent can and can’t touch, how we know it’s working, and which decisions it makes on its own as it proves itself. You’ll work closely with SOC analysts, detection engineers, product, and other engineering teams. You’ll go deep in the code and help the engineers around you grow. Your work will directly shape how Huntress scales <a href="https://www.huntress.com/blog/scaling-to-protect-the-99">protection for the 99%</a>.
We make full use of AI coding tools to enable you to accelerate your development. We don’t cap token usage. We expect you to use AI and all tools responsibly.
Responsibilities:&nbsp;
<ul>
<li>Own the architecture of agentic investigation. You help define how signals move from detection into investigation, how investigation state is managed, how tools are designed and exposed to agents, and what a finished investigation contains: the verdict, the timeline, the scope, and the evidence behind every claim. When the team is stuck between options, you make the call, and the foundations you set are what others build on for years.</li>
<li>Build agents that investigate like a strong analyst. You work alongside our SOC and product researchers to learn how experienced analysts actually triage and investigate, then turn that into agent behavior: which questions to ask, which evidence to gather, when to dig deeper, and when to stop and hand off to a human.</li>
<li>Take toil off analysts’ plates. Beyond full investigations, you build LLM-powered pre-processing for the tools and data sources analysts rely on every day. It summarizes, correlates, and highlights what matters, so analysts spend their time on judgment instead of assembly.</li>
<li>Bring a security mindset to the agent itself. The agent reads attacker-influenced data, runs across thousands of customer tenants, and can take action in customer environments. You design as if someone is trying to manipulate it, because someone will. Trust boundaries, tenant isolation, and auditability are part of the architecture from the start.</li>
<li>Treat evaluation as a core part of the product. You define how we measure whether an investigation is correct, well-reasoned, and well-documented, and you make sure no prompt, model, or tool changes without evidence that it helps.&nbsp;</li>
<li>Decide with data what the system does on its own. Based on measured performance, you decide where it acts autonomously, where a person reviews its work, and how that changes over time. You also recognize when a problem doesn’t need an agent at all.</li>
<li>Build for production, not for demos. You design for reliability, latency, and cost at scale. The system keeps working when models are slow, wrong, unavailable, or quietly changed underneath you, and anyone can trace exactly why an investigation reached its conclusion or why an action was taken.</li>
<li>Augment analysts, don’t replace them. You design the handoff between agent and analyst so that when a case reaches a person, the agent’s work makes them faster and better informed. You consider how analysts’ work changes as agents take on more of it, and how we explain agent decisions to partners and customers in a way they can trust.</li>
<li>Prototype your way through hard problems. When the team hits something genuinely uncertain, you dig in first: derisk it, prove out the approach, then hand it off clearly.</li>
<li>Be the engineering face of the Agentic SOC. In conversations with SOC leadership, other engineering teams, product, and executives, you represent the team’s technical perspective clearly and credibly. You drive alignment on key decisions, carry context in both directions, and protect the team from unclear scope.</li>
<li>Balance technical rigor with pragmatism. You push back when a shortcut creates real risk, and you also push back on over-engineering when the goal is discovery. You have a bias for action and frequent feedback from analysts and customers, and you can explain your tradeoffs to engineers and non-engineers alike.</li>
<li>Raise the floor and the ceiling. Your technical leadership is measured by how the whole team performs, not just by what you personally ship. That shows up in thoughtful code review, pairing on problems others are stuck on, and creating leverage through better patterns, tooling, and shared understanding. You partner with the engineering manager on team health, give direct feedback, and model the judgment and accountability you want the team to have.</li>
</ul>
What You Bring To The Team:&nbsp;
<ul>
<li>15+ years of experience developing complex software products, including significant time as the technical lead on production systems</li>
<li>Hands-on experience designing, shipping, and operating LLM-based agents in production, covering tool use, context management, structured output, guardrails, and evaluation, along with a clear-eyed understanding of how they fail</li>
<li>A track record of building evaluation for non-deterministic systems, such as labeled datasets, offline evals, and regression gates, and of measuring quality over time rather than at launch</li>
<li>A security mindset: experience building systems that handle untrusted input, enforce multi-tenant isolation, and produce an audit trail that holds up under scrutiny</li>
<li>Experience building systems that make automated decisions with real consequences, and the judgment to know what to automate and what to leave to people</li>
<li>Curiosity about how security analysts think and work, and a willingness to spend real time learning from them</li>
<li>Deep backend expertise in distributed systems, queues, and durable workflows, and concurrency, with a track record of designing for throughput and correctness under load</li>
<li>Strong skills in one or more backend languages and the ability to pick up new ones quickly. Our primary stack is Ruby on Rails, and we expect you to become fluent in it</li>
<li>Experience with AWS, Azure, or other public cloud environments, and with data stores such as Postgres and Redis</li>
<li>Experience with AI coding tools, such as Claude Code</li>
<li>BS or MS in Computer Science or Engineering, or equivalent experience</li>
</ul>
Bonus Points:&nbsp;
<ul>
<li>Experience working in or building for a SOC, incident response, threat hunting, or detection engineering. It isn’t required, but it helps a lot, because we build these workflows around how our analysts actually investigate</li>
<li>Familiarity with endpoint and identity telemetry and with attacker tradecraft</li>
<li>Experience attacking or adversarially testing ML or LLM systems</li>
<li>Experience with Ruby on Rails</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul><div class="content-conclusion">
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our <a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;
</div>

Principal Software Engineer - Agentic SOC

Reports to: Engineering Manager
Location: Remote US
Compensation Range: $200,000 to $220,000 base plus bonus and equity
&nbsp;
What We Do:&nbsp;
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
What You’ll Do:
Huntress is looking for a highly strategic and collaborative Staff Software Engineer to drive the technical vision and architectural evolution of the Huntress Core Platform.
Our Core Platform contains the foundational components that power the entire Huntress product suite, including the notification system, onboarding, authentication, integrations, and APIs. While you will remain deeply hands-on developing the most complex features for the platform, your scope expands beyond standard delivery. You will act as the technical anchor for your team, solving our most complex scaling challenges and eliminating cross-team dependencies. You will design the systems that empower all other engineering teams to build faster and more securely, acting as a technical thought leader who ensures our architecture anticipates future growth as we scale to <a href="https://www.huntress.com/blog/scaling-to-protect-the-99">protect the 99%</a>.
Responsibilities:
<ul>
<li>Design, implement and mentor engineers on the most complex features the team builds</li>
<li>Partner directly with the Engineering Manager to steer the team’s technical direction, improve overall team function, and set the standard for engineering excellence</li>
<li>Take ownership of cross-team dependencies, actively collaborating with multiple engineering teams to eliminate roadblocks and ensure smooth feature delivery.</li>
<li>Drive the Architectural Decision Record (ADR) process for major technical changes that impact the wider codebase or require alignment across multiple functions</li>
<li>Focus on the entire lifecycle of the system, including evolution, configuration and technical risk management</li>
<li>Mentor and coach engineers across the team, acting as a positive role model who promotes collaboration and engagement</li>
</ul>
What You Bring To The Team:
<ul>
<li>10+ years of experience developing complex software products, with a proven track record of acting as the senior technical anchor for a team</li>
<li>5+ years of programming in Ruby on Rails, ideally with experience managing and scaling large monoliths</li>
<li>Strong architectural experience, including a history of driving technical design decisions (ADRs) and managing system lifecycles, configuration and technical risk</li>
<li>Experience with AWS or other public cloud environments, Linux-based infrastructure and advanced database management at scale</li>
<li>Excellent technical, diagnostic, and troubleshooting skills</li>
</ul>
<ul>
<li>Ability to grasp new tools and technologies quickly</li>
<li>Ability to prioritize and execute multiple tasks at a time in a fast-paced environment, often operating independently</li>
<li>Demonstrated ability to take highly ambiguous requirements or multi-team initiatives and decompose them into actionable work for the team</li>
<li>Exceptional communication skills, with the ability to build strong relationships and coordinate smoothly across multiple teams, product managers, and leadership</li>
<li>Experience partnering directly with Engineering Managers or Product Leaders to set team-level technical strategy and balance tech debt with product delivery</li>
<li>Experience with AI coding tools and workflows, with the ability to help the wider team adopt them effectively, responsibly, and pragmatically</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul>
&nbsp;&nbsp;
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.&nbsp;&nbsp;
We do discriminate against hackers who try to exploit small businesses.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
If you have questions about your personal data privacy at Huntress, please visit our<a href="https://support.huntress.io/hc/en-us/articles/14695525600915-Candidate-Privacy-Notice"> privacy page</a>.
#BI-Remote&nbsp;

Staff Software Engineer  - Core Platform (Ruby/Rails)

Reports To: Director of Product Management, Platform
Location: Remote US
Compensation: $190,000 to $220,000 base plus bonus and equity
&nbsp;
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M+ endpoints and 15M+ identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
About The Role:
We are building a product management organization to own and drive our product strategy, and we are looking for an experienced product manager to own a new team focused entirely on Security tooling for the Huntress SOC.
Our SOC is the cornerstone of the Huntress Security Platform, serving SMB and mid-market clients through MSP/MSSP and Reseller channels. It delivers premium, human+AI services at a scale most companies can't match — Rapid Response, Tactical Response, and Hypercare together accounted for roughly 150 engagements in a single recent month. Much of that delivery still runs on an internal SOC platform that does not match analysts' current needs - this includes spreadsheets, Slack threads, and per-engagement documents. Our analysts work on a surface that has never had a first-class experience.
You will own the internal security experience: the surface our SOC works in every day, the tooling that makes our response services repeatable, and the shared investigation and evidence model the rest of the SOC platform is built on. This is the delivery engine behind the margin thesis — the work that enables us to grow the business without growing SOC headcount linearly. It is also the foundation layer, so the interfaces you publish are consumed by our agentic automation team and our partner-facing product team.
Your users are professional security analysts, and they are down the hall. You will get direct, immediate, unfiltered feedback on everything you ship from people who do this work for a living.
You will work closely with SOC leadership, engineering leaders, support, and other Product Managers. To be successful in this position, you need real fluency in how a SOC actually operates — how analysts triage, investigate, escalate, and report — and the judgment to tell the difference between a workflow that needs product support versus not. You will be building internal-facing systems where the return is measured in analyst throughput and time-to-close rather than ARR, and you will need to make that case clearly to executive stakeholders.
What You’ll Do:&nbsp;
<ul>
<li>Work with the Director of Product, the Head of SOC, and other relevant stakeholders to set the SOC tooling vision and strategy, and clearly articulate the business value so that everyone understands where we are headed</li>
<li>Own the roadmap for analyst UX, Rapid Response and Tactical Response tooling, product support and operations, and SOC platform</li>
<li>Serve as the primary steward of the shared investigation and evidence model — canvas, queues, triage package — and publish the interface adjacent product teams build on</li>
<li>Partner with SOC leadership, analysts, and Tactical Response to turn manual, out-of-product processes into standardized, automation-first internal workflows</li>
<li>Take ownership of the Portal Enhancement Kit and drive analyst-built improvements into the native product so the best of internal tooling becomes the best of product</li>
<li>Demonstrate an ability to decipher and articulate potentially ambiguous operator needs and mold them into successful, innovative solutions</li>
<li>Work with designers, engineers, and architects to create detailed business requirements, epics, and user stories that will be used to shape product specifications and architecture</li>
<li>Participate as a key contributor in all phases of product development, from discovery to launch</li>
<li>Protect a capacity floor for resiliency and technical debt, and hold the line on it against feature pressure</li>
<li>Serve as the intermediary between engineering and senior management and other non-technical stakeholders, with the ability to break down and translate highly technical information into layman's terms and vice versa</li>
<li>Work with design and engineering teams to produce mockups, wireframes, and prototypes to assess the validity and strength of a new capability</li>
<li>Define and report operational metrics — time-to-close, throughput per analyst, repeatability of delivery — to track and evaluate the success of the strategy</li>
</ul>
What You Bring To The Team:&nbsp;
<ul>
<li>5+ years of experience in a product management role with past responsibility for cybersecurity products; bonus for MDR or SOAR products</li>
<li>Direct experience working in a SOC and building SOC tools and products</li>
<li>Demonstrated experience building internal-facing or operator-facing tooling where the users are professionals doing skilled work, not consumers</li>
<li>Strong working knowledge of analyst workflows, incident response, and investigation lifecycles - Excellent UI/UX and design skills</li>
<li>Prior experience as a security analyst, incident responder, security engineer, or software engineer, or equivalent hands-on depth</li>
<li>Experience owning shared services or platform interfaces consumed by other product teams</li>
<li>Demonstrated experience designing and delivering products utilizing artificial intelligence tools and technologies, such as Claude or similar</li>
<li>Comfort with operational metrics and the ability to make an investment case that is not denominated in new revenue</li>
<li>Experience working in an agile development environment using agile development tools</li>
<li>Leverage excellent written and verbal communication skills to create epics and stories for engineering that align engineers with intended outcomes</li>
<li>Strong creative and critical thinking abilities</li>
<li>Mid-market and MSP or MSSP experience is a significant benefit</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul>
&nbsp;&nbsp;
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our&nbsp;<a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;

Senior Product Manager, SOC Experience

Reports to: Engineering Manager
Location: Remote US
Compensation Range: $200,000 - $220,000 base plus bonus and equity 
&nbsp;
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 14M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
About the Team
Huntress protects the small and mid-sized businesses that attackers assume can't afford a security team. The Detection Platform team builds the engines and pipelines that turn billions of raw telemetry events into the signals our 24/7 SOC acts on. Every detection Huntress ships, across endpoint, identity, SIEM, and third-party EDR, runs through systems this team owns. We measure ourselves on two things: time to detection and detection engine uptime.
About the Role
We're hiring a Staff Software Engineer to help build and rebuild these systems without disrupting the SOC that depends on them, and to make their behavior predictable under load. This is a hands-on technical leadership role: you'll lead major workstreams, set direction that other engineering teams build against, and write and review production code every week.
What You'll Own
<ul>
<li>Detection engine and pipeline modernization. We're rewriting our detection engine to support the full Sigma v2 specification, including stateful correlation of patterns across many events over time. In parallel, we're reworking several existing detection pipelines and building new ones, moving off the bespoke per-product detectors we've accumulated and onto a common platform. You'll lead major workstreams across both and own the validation approach that proves a reworked pipeline still behaves like the one it replaces, so we can turn old paths off knowing we haven't lost anything.</li>
<li>Reliability and behavior under load. A detection pipeline that quietly stops producing signals is worse than one that crashes loudly, and detection volume spikes for reasons we don't always control. You'll build the guarantees that make quiet failure impossible: end-to-end latency measurement, liveness coverage, and alerting that fires when expected work stops arriving. You'll also build the mechanisms that keep a spike bounded and recoverable.</li>
<li>Event schemas and data contracts. Our schema and transformer layer are what several other engineering teams build their detections against. You'll help drive toward a coherent internal standard and build the validation and drift-detection tooling that catches upstream changes before they break detections.</li>
</ul>
What We're Looking For
Required
<ul>
<li>Deep experience designing, building, and operating production distributed systems at scale, primarily in Go, with the range to work across several layers of the stack.</li>
<li>You have replaced or substantially re-architected a live, high-throughput system without breaking its consumers, and you can walk us through how you proved the new path was equivalent, staged the cut-over, and decided it was safe to retire the old one.</li>
<li>Experience with high-volume event or data pipelines, and a good feel for how they behave under load: where things queue, where they fall behind, and what happens to correctness when they do.</li>
<li>Strong operability instincts. You design observability in rather than retrofitting it, and you've built alerting that catches the absence of expected work, not just errors.</li>
<li>Demonstrated technical leadership across team boundaries. You've set a direction that other teams had to build against and raised the engineering bar around you, without needing positional authority.</li>
<li>Judgment about production quality: when a system is good enough to ship, when it needs more evaluation, and when it shouldn't ship at all.</li>
<li>Hands-on experience with AI coding tools, and a point of view on using them well, where correctness is a security outcome.</li>
</ul>
Strongly Preferred
<ul>
<li>A background in security operations or security engineering: time spent writing or tuning detections, or working in a SOC. You know what makes a detection maintainable, how fast noise erodes a SOC's trust in its tooling, and why a missed detection is a different class of failure than a noisy one.</li>
<li>Experience with detection-as-code or other rule- and DSL-driven systems, including the parsing and evaluation work that supporting a specification properly entails.</li>
<li>Experience building platform tooling for non-engineer authors such as rule writers, analysts, and researchers, where the product surface is a language, an API, and a feedback loop.</li>
<li>Ruby on Rails experience. Some of our pipeline and application code is Rails, and you'll occasionally read and review Ruby. It's a nice-to-have, not a requirement; we'll help you ramp.</li>
</ul>
Our Stack
You'll work primarily in Go across our detection engines, pipelines, and the services around them, with Kafka, Temporal, Redis, ClickHouse, Elasticsearch, and Kubernetes across AWS and Azure. Some of our pipeline and application code is Ruby on Rails. Detection logic is written in Sigma.
We don't expect prior experience with all of it, and we're not screening on the list; Go is the one language we'll assess directly in interviews. You should be someone who likes being fluent across a broad stack rather than being specialized in one corner of it.
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul>
&nbsp;&nbsp;
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our <a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;

Staff Software Engineer - Detection Platform (GoLang)

Reports to: Engineering Manager
Location: Remote US
Compensation Range: $200,000 to $220,000 base plus bonus and equity
&nbsp;
What We Do:&nbsp;
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
What You’ll Do:&nbsp;
The Huntress team is looking for an innovative and highly motivated Staff Software Engineer with excellent problem-solving and communication skills to join our Identity Security Posture Management (ISPM) team.&nbsp; This is a new product which is generally available on July 1st and already has very strong engagement within our customer base.&nbsp; You will be instrumental in building and growing this product from its roots. You will be part of a growing product team that is strategically key to protecting the 99% from cyber attacks.&nbsp;&nbsp;
In this role, you will focus on creating the technical vision and implementing new and exciting features from the product roadmap. You will work closely with a product manager, senior engineers, security researchers, designers, and market experts to develop market-defining solutions for the identity protection space. At Huntress, Staff Engineers are expected to be technical leaders, driving new ideas, building great software and mentoring more junior engineers.&nbsp; We make full use of AI coding tools to enable you to accelerate your development.&nbsp; We do not cap token usage, however we expect our engineers to use AI, and all tools responsibly.&nbsp;&nbsp;
ISPM is a new frontier of security, with the vast majority of breaches in 2026 beginning with identity compromise. ISPM moves compromise prevention “further left”, ideally preventing more identities from being breached by encouraging better hygiene in everyday actions.&nbsp; In this role, you will build scalable solutions to emerging threats in a rapidly evolving landscape. In many cases, you will work on problems nobody has solved before, with no existing template, so the ability to learn quickly and think outside the box is critical. You will work across the stack, building new UI one day, scalable data models and event ingestions the next, then wrapping up the week with automated detectors to alert customers and our Security Operations Center to suspicious activity.
Responsibilities:
<ul>
<li>Design, develop, and maintain end-to-end solutions using primarily Ruby on Rails.</li>
<li>Implement efficient data pipelines to extract relevant information from massive amounts of noise&nbsp;</li>
<li>Collaborate with security researchers to understand hacking strategies and methods to combat them</li>
<li>Be a technical thought leader for your team, providing architectural and design direction</li>
<li>Continuously improve solution quality through code reviews, manual and automated testing</li>
<li>Set standards for excellence and develop processes that make the team continuously more efficient</li>
<li>Lead more junior engineers to deliver larger projects, including breaking down ambiguous problems into well-defined tasks, validating designs, and serving as POC for stakeholders</li>
<li>Design the systems and architecture to support processing petabytes of data efficiently</li>
</ul>
What You Bring To The Team:
<ul>
<li>10+ years of experience developing complex software products</li>
<li>5+ years of programming in Ruby on Rails</li>
<li>Experience with AI coding tools, such as Claude Code</li>
<li>Experience with relational databases, such as Postgres&nbsp;</li>
</ul>
Preferred Qualifications:
<ul>
<li>Experience working in the CyberSecurity industry</li>
<li>Experience working with external APIs (particularly REST, OData, authZ and authN flows)</li>
<li>Familiarity with identity and resource security providers like m365, Okta, Google Workspaces, or similar</li>
<li>Experience with other data storage technologies (Clickhouse, Redis, ElasticSearch, Mongo, etc.)</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul>
&nbsp;&nbsp;
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including&nbsp;resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our <a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;

Staff Software Engineer - ISPM Platform (Ruby/Rails)

Reports to: Engineering Manager
Location: Remote US
Compensation Range: $200,000 to $220,000 base plus bonus and equity
&nbsp;
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
What You’ll Do:&nbsp;
The Huntress team is looking for an innovative and highly motivated Staff Software Engineer with excellent problem-solving and communication skills to join our Endpoint Security Posture Management (ESPM) team. This is a new product which will be generally available on October 1. You will be instrumental in building and growing this product from the ground up. You will be part of a growing product team that is strategically key to protecting the 99% from cyber attacks.&nbsp;&nbsp;
In this role, you will focus on creating the technical vision and implementing new and exciting features from the product roadmap. You will work closely with one of our co-founders to develop this market-defining solution. At Huntress, Staff Engineers are expected to be technical leaders, driving new ideas, building great software, and mentoring more junior engineers. We make full use of AI coding tools to enable you to accelerate your development. We do not cap token usage; we expect our engineers to use AI and all tools responsibly.&nbsp;&nbsp;
ESPM moves compromise prevention “further left”, ideally preventing more endpoints from being breached by encouraging better hygiene in everyday actions. In this role, you will build scalable solutions to emerging threats in a rapidly evolving landscape. In many cases, you will work on problems nobody has solved before, with no existing template, so the ability to learn quickly and think outside the box is critical. You will work across the stack, building new UI one day, scalable data models and event ingestions the next, then wrapping up the week with automated detectors to alert customers and our Security Operations Center to suspicious activity.
Responsibilities:&nbsp;
<ul>
<li>Design, develop, and maintain end-to-end solutions using primarily Ruby on Rails</li>
<li>Deliver code quickly and efficiently for rapid value delivery and testing</li>
<li>Implement efficient data pipelines to extract relevant information from massive amounts of noise&nbsp;</li>
<li>Collaborate with security researchers to understand hacking strategies and methods to combat them</li>
<li>Be a technical thought leader for your team, providing architectural and design direction</li>
<li>Continuously improve solution quality through code reviews, manual, and automated testing</li>
<li>Set standards for excellence and develop processes that make the team continuously more efficient</li>
<li>Lead more junior engineers to deliver larger projects, including breaking down ambiguous problems into well-defined tasks, validating designs, and serving as POC for stakeholders</li>
<li>Design the systems and architecture to support processing petabytes of data efficiently</li>
</ul>
What You Bring To The Team:&nbsp;
<ul>
<li>10+ years of experience developing complex software products</li>
<li>5+ years of programming in Ruby on Rails</li>
<li>Experience with AI coding tools, such as Claude Code</li>
<li>Experience with relational databases, such as Postgres</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul>
&nbsp;&nbsp;
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our <a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;

Staff Software Engineer-ESPM Platform (Ruby / Rails)

Reports to: Engineering Manager&nbsp;
Location: Remote US&nbsp;
Compensation: $215,000 to $240,000 base plus bonus and equity
&nbsp;
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
What You’ll Do:
The Huntress team is looking for an innovative, highly motivated, and self-driven Principal Software Engineer to join our Huntress SIEM team. As a Principal Software Engineer at Huntress, you will be responsible for leading a feature delivery team in the design, development, and high-quality release of software features for the Huntress SIEM Platform that provides for automated detection and human-powered threat hunting. You will focus on creating the technical vision for new and exciting features from the product roadmap. You’ll be working with a smart and diverse team of problem solvers who exhibit high energy, deep technical skills, and a drive to get things done.
As a Principal Software Engineer, you will work closely with the platform and architecture teams to design and build the type of solutions Huntress has become known for, which are solutions that not only solve problems but drastically improve industry standards, workflows, and user experiences.
Responsibilities:&nbsp;
<ul>
<li>Own delivery, product quality, and up-time of complex mission-critical features/systems</li>
<li>Impact objectives and initiatives that span across departments</li>
<li>Lead technical decisions with company-wide impact</li>
<li>Evolve our collective understanding of our technical domain</li>
<li>Define long-term strategic technical goals and initiatives</li>
<li>Effectively communicate strategic technical vision and set an example for the organization</li>
<li>Work with the team engineering manager to make sure the team is meeting technical expectations and upholding strategy</li>
<li>Communicate critical trade-offs on technical approaches across the platform</li>
<li>Collaborate closely with the team engineering manager, product manager, security research, platform, and architect on strategic initiatives and technical designs</li>
<li>Develop and enforce best practices for the team and department</li>
<li>Design and optimize workflows that bridge the gap between traditional development practices and AI-assisted engineering.</li>
<li>Build and evolve AI tooling and usage in daily development workflows</li>
<li>Experience using AI coding agents to accelerate development</li>
<li>Engage with customers as necessary</li>
<li>Contribute to and improve the organization's test frameworks and approaches</li>
<li>Develop a deep cross-product understanding of features and architecture</li>
<li>Own and drive the performance impact of team/department solutions and the overall platform suite</li>
<li>Lead and develop high-quality, scalable software, software designs, and architecture, and set standards for team excellence</li>
<li>Own improving visibility into software systems at scale, including monitoring and alerting</li>
<li>Focus on the entire life cycle of the system, including evolution, configuration, and risk management</li>
<li>Ensure code quality and test code coverage through code reviews, test plan reviews, and security reviews</li>
<li>Lead the team in providing accurate estimates and taking ownership of the timely completion of work</li>
<li>Mentor and coach junior engineers, fostering an environment that values professional development and promotes collaboration and engagement</li>
<li>Actively engage with the team and lead by being a positive role model</li>
</ul>
What You Bring To The Team:&nbsp;
<ul>
<li>15+ years of experience developing complex software products</li>
<li>8+ years of programming in Ruby on Rails</li>
<li>8+ years scaling Postgres databases</li>
<li>A BS in Computer Science or Engineering or equivalent experience gained through work</li>
<li>Experience with modern data storage and query systems for high-volume analytics workloads</li>
<li>Experience in Agile or Scrum environment</li>
<li>Experience with JavaScript and CSS</li>
<li>Experience reviewing code, problem-solving, and technical troubleshooting</li>
<li>A deep understanding of ActiveRecord (Rails)</li>
<li>Excellent technical, diagnostic, and troubleshooting skills</li>
<li>Ability to grasp new tools and technologies quickly</li>
<li>Effective communication and interpersonal skills</li>
<li>Ability to prioritize and execute multiple tasks at a time in a fast-paced environment, often operating independently</li>
<li>Ability to distill complex technical topics so that they can be shared and understood by a non-technical audience meaningfully</li>
<li>Ability to work cross-functionally between multiple teams</li>
<li>Passion for technology, strong motivation, and responsibility for high-quality software features</li>
<li>Ability to build strong interpersonal relationships with product, development teams, leadership, senior management, and internal and external stakeholders</li>
</ul>
Helpful experience, but not required
<ul>
<li>Experience working with SIEM platforms or security log/event data</li>
<li>Experience with AWS, Azure, and/or GCP cloud environments</li>
<li>Experience with<a href="https://stimulus.hotwired.dev/"> Stimulus</a>,<a href="https://turbo.hotwired.dev/"> Turbo</a>, and/or<a href="https://hotwired.dev/"> Hotwire</a> (or similar frameworks)</li>
<li>Experience working in a Ruby on Rails monolith</li>
<li>A passion for building platform capabilities</li>
<li>Eagerness to work with<a href="https://tailwindcss.com/"> Tailwind CSS</a>,<a href="https://tailwindcss.com/plus"> Tailwind UI</a> and<a href="https://flowbite.com/"> Flowbite</a></li>
<li>Experience with data-led product design</li>
<li>Experience with Clickhouse</li>
<li>Experience with Vector</li>
</ul>
What We Offer:&nbsp;
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy, including vacation, sick time, and paid holidays</li>
<li>12 weeks of paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans&nbsp;</li>
<li>401(k) with a 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees&nbsp;</li>
<li>One-time $500 reimbursement for building/upgrading home office</li>
<li>Annual allowance for education and professional development assistance&nbsp;</li>
<li>$75 USD/month digital reimbursement</li>
<li>Access to the BetterUp platform for coaching, personal, and professional growth</li>
</ul>
&nbsp;&nbsp;
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.&nbsp;
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. &nbsp;
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:&nbsp;
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com">accommodations@huntresslabs.com</a>. Please note that non-accommodation requests to this inbox will not receive a response.&nbsp;
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our <a href="https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&amp;source=click" target="_blank">Candidate Privacy Notice</a> for more details on our practices and your data privacy rights.
#BI-Remote&nbsp;

Get a job referral to Huntress

Description

Jobs· 10 open

About

Financials

Referrals