Security Operations Engineer

Location: Romania; remote

Company

hirify.global develops innovative software solutions and platforms for banking and insurance processes, helping financial services organizations improve speed, scalability, and cost-efficiency through digital business innovation and cloud technology.

What you will do

• Investigate and respond to security incidents through the incident response function.
• Automate incident response and defense center activities using playbooks, automation rules, and scripts.
• Develop and tune detection rules to improve coverage and true-positive rates.
• Collaborate with IT on laptop and server hardening configurations.
• Partner with Privacy on notifications related to data disclosures.
• Maintain compliance with ISO 27001, SOC 2, DORA, and other relevant frameworks.

Requirements

• At least 3 years of experience in defense engineering or incident response.
• Hands-on experience configuring detection mechanisms and using SIEM, XDR, or EDR platforms such as Microsoft Sentinel and Defender.
• Strong knowledge of cloud environments, attacker methodologies, TTPs, and attack paths across Windows, macOS, and Linux.
• Proficiency in scripting and KQL or similar query languages.
• Working knowledge of security tooling APIs, including Microsoft Graph, Defender, or Purview.
• Proficient English, written and verbal.

Nice to have

• Knowledge of Azure.

Culture & Benefits

• Flexible remote work setting that supports creativity and new ideas.
• Collaboration within a diverse, globally connected team.
• Career development and advancement opportunities based on performance.
• Competitive compensation package.
• Startup-style agility combined with the expertise and market presence of an established organization.