Sr. Staff Security Analyst - Incident Commander (Cybersecurity)

Location: United States

Salary: $145,600–$209,300 annually, plus potential performance-based bonus and restricted stock unit awards.

Company

hirify.global provides a workforce operating platform using workforce insights and AI to help organizations improve productivity, trust, and talent management.

What you will do

• Lead major cyber incident command activities, coordinating technical response, investigative workstreams, action tracking, stakeholder briefings, containment, and recovery.
• Perform hands-on digital forensics and incident response across endpoint disk and memory, network, cloud, Windows, Linux, identity, and runtime environments.
• Conduct threat hunting across SIEM, EDR, cloud, identity, network, and forensic data sources, including GenAI-assisted workflows.
• Collaborate with Security Operations, Threat Intelligence, Detection Engineering, Cloud Security, Infrastructure, Legal, Privacy, and business stakeholders.
• Mentor and train analysts, lead post-incident reviews and tabletop exercises, and develop playbooks, procedures, training materials, and practical exercises.
• Convert investigative findings into detections, response logic, hunting hypotheses, automation, and operational improvements; support malware analysis when needed.

Requirements

• 5+ years of hands-on digital forensics and incident response experience in major enterprise environments.
• Advanced knowledge of forensic artifacts across network, cloud, Windows, Linux, endpoint, identity, and runtime environments.
• Experience leading major cyber incident command, including technical coordination, decision support, stakeholder updates, and post-incident improvements.
• Hands-on threat hunting experience with SIEM, EDR, cloud telemetry, identity logs, network data, and forensic artifacts.
• Experience with a major public cloud provider and investigative scripting using Python, PowerShell, Bash, or a similar language.
• Strong understanding of SOC operations, incident response lifecycle, evidence handling, investigation documentation, and executive-ready reporting.

Nice to have

• Reverse engineering and malware analysis experience, including static or dynamic triage of malware, scripts, payloads, or attacker tooling.
• Experience with SOAR, cloud security, case management, and forensic tooling platforms.

Culture & Benefits

• Work focused on protecting hirify.global and its customers from sophisticated cyber threats.
• Benefits and flexible working practices are provided.
• Potential performance-based bonus and restricted stock unit awards.
• Equal opportunity employment and disability accommodation support are available.