Meet Sarah Reddish, a Security Operations Analyst on Huntress' global Security Operations Center (SOC), working in Triage & Analysis. Her role goes far beyond monitoring a queue. She investigates and researches suspicious activity, intrusions, and a wide range of security threats. She also analyzes partner environments to determine what happened and what matters, and then writes clear reports with practical, easy-to-follow remediation guidance.
"I don't just identify threats," she says. "I translate them into clear reports and outcomes that help partners understand the risk and respond confidently." That means turning complex technical findings into information people can understand and act on, while helping protect partner data, systems, and peace of mind.
Sarah hanging with her Huntress teammates
A wider view of security operations
At Huntress, Sarah gets to work as part of a truly global SOC and protect a broad range of partner environments at scale. She collaborates across regions, participates in cross-region handoffs that support global SOC continuity, and learns from an exceptionally talented analyst community.
That global perspective changes what an investigation can become. Sarah isn't only working through a single environment or incident. She's helping turn investigations into actionable protection for many partners, while learning from analysts who bring different experiences and perspectives to the work.
Hear Sarah in this Huntress Shorts, "Slow down if you get a pop-up asking you to update your Adobe software"
From ambiguity to action
The most rewarding part of Sarah's work right now is turning complex, ambiguous threats into clear answers and actionable guidance. She investigates what happened, helps disrupt malicious activity, and sees her work directly wreck adversaries and improve our partners' security.
In one investigation, a fake browser-verification prompt instructed a user to run a command. Sarah traced the activity from the initial lure through execution and follow-on behavior, separating what she observed from what she could confirm. She then translated the investigation into clear containment and recovery steps for the partner, turning a confusing incident into a practical path forward.
As Sarah puts it, "The work is much more than monitoring alerts. You investigate what happened, build attack timelines and scope, translate your findings and why they matter, and give partners clear remediation steps to protect themselves." In other words, Sarah's goal is to make the situation understandable and the next steps practical, even when the investigation begins with incomplete or unclear information.
Trust that stretches the role
Sarah's growth has also been shaped by the trust and guidance of Chris Hecker, Manager of Security Operations, who serves as a sounding board for incident-severity decisions, operational escalations, and career development. His practical guidance, along with the trust he places in Sarah to own her work, has challenged her to think more strategically about both individual investigations and their broader impact.
That balance of support and ownership is an important part of how Sarah approaches the role. She is encouraged to work through difficult decisions, learn from an experienced global team, and consider not just what happened in an environment, but how her analysis can help a partner respond with confidence.
Stay curious and keep learning
For anyone considering a role like hers, Sarah's advice is direct: "Come ready to stay curious, think critically, and keep learning." The work is challenging and meaningful, with the opportunity to investigate real threats, communicate clearly, and learn alongside a talented global team.
If you're interested in doing work like Sarah, check out the Huntress Careers page.
