Senior Security Analyst / SOC (Cybersecurity)

Location: Amman, Jordan; hybrid work with work from home up to 2 days per week depending on team needs

Company

hirify.global provides technology and communications solutions for airports, airlines, borders, transportation, and government clients worldwide.

What you will do

• Act as the primary escalation point for complex security investigations and incident analysis.
• Investigate alerts and incidents across endpoint, network, identity, cloud, and application environments using SIEM, EDR/XDR, and related telemetry.
• Validate alert classifications, severity, scope, and escalation decisions; build timelines, collect evidence, and document findings.
• Escalate confirmed or suspected incidents to the Security Incident Response Team and collaborate throughout the response lifecycle.
• Develop and tune detection rules, correlation logic, SOC use cases, and investigation playbooks.
• Mentor SOC Analysts and support vulnerability management, cyber simulations, tabletop exercises, post-incident reviews, and SOC improvement initiatives.

Requirements

• 3–5 years of experience as a SOC L2 Analyst or in an equivalent Security Operations role.
• Advanced experience investigating security events with SIEM and EDR/XDR platforms; experience with Elastic, Cortex XDR, Microsoft Defender XDR, and CrowdStrike Falcon is preferred.
• Experience analyzing logs and telemetry from endpoints, identity platforms, cloud services, firewalls, proxies, DNS, VPN, and applications.
• Experience developing, tuning, and optimizing detection rules, correlation logic, and SOC use cases.
• Strong understanding of incident investigation, triage, escalation, and response lifecycles.
• Proficiency with KQL, Lucene, EQL, and Sigma.
• Working knowledge of PowerShell and/or Python for security investigations, automation, and operational efficiency.
• Solid knowledge of Windows, Linux, Active Directory, Microsoft 365, Azure/AWS, networking, common attack techniques, and the MITRE ATT&CK framework.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field, plus at least one recognized cybersecurity certification such as SC-200, GCIH, GCIA, CySA+, or ECIH.

Nice to have

• Experience with vulnerability validation, risk prioritization, and remediation tracking.
• Experience with cyber simulations, red-team exercises, tabletop exercises, and post-incident reviews.
• Familiarity with security automation, orchestration technologies, and SOC performance reporting.

Culture & Benefits

• Flex Day to adapt the workday to personal plans.
• Flex-Location allows up to 30 days per year working from any location in the world.
• Employee Assistance Program and Champion Health wellbeing support for employees and dependents.
• Access to professional development platforms and programs, including LinkedIn Learning, Microsoft’s Enterprise Skills Initiative, Pluralsight, Harvard Business Publishing, and Stanford.
• Competitive benefits aligned with the local market and employment status.
• Inclusive environment with a focus on diversity and equal opportunity.