Alert, Detection, and Response Engineer, Associate - Blackstone Cybersecurity

Location: Miami, United States

Expected annual base salary: $110,000–$170,000

Company

hirify.global is an alternative asset manager with technology teams building systems that manage risk, improve efficiency, and increase transparency across its businesses and investment portfolio.

What you will do

• Manage incident investigations from alert intake through containment, eradication, and closure across email, endpoint, identity, network, and cloud environments.
• Handle Tier 1 escalations and complex investigations, including phishing, business email compromise, credential misuse, privilege abuse, session hijacking, and multi-factor authentication bypass.
• Use SIEM and EDR platforms to pivot across telemetry, investigate endpoints, perform live response, collect artifacts, and contain hosts.
• Investigate third-party and SaaS provider compromises, assess exposure, and coordinate remediation with legal, compliance, vendor risk, and business stakeholders.
• Author and tune detections, reduce false positives, develop response automation, and improve coverage for AI-related threats.
• Mentor Tier 1 analysts, document incidents with appropriate evidence handling, contribute to threat hunts and purple team exercises, and participate in an occasional quarterly on-call rotation.

Requirements

• 2+ years of hands-on experience in security operations, incident response, or a comparable technical security role.
• End-to-end investigation experience in a SOC or incident response environment, including root-cause analysis and containment.
• Hands-on experience with an enterprise SIEM and query language such as Splunk SPL, Microsoft Sentinel KQL, or Elastic, plus an enterprise EDR platform.
• Knowledge of cloud and identity investigations, IAM, SSO, Okta or Microsoft Entra ID, attacker behavior, and MITRE ATT&CK.
• Scripting experience with Python and/or PowerShell for enrichment, parsing, and automation.
• Demonstrated practical use of AI tooling, sound judgment regarding AI output, and clear technical communication with technical and non-technical stakeholders.

Nice to have

• Detection-as-code, Git workflows, peer review, CI validation, SOAR automation, or Sigma content experience.
• Digital forensics, malware triage, sandboxing, threat hunting, or agentic AI security tooling experience.
• Experience with AWS, Azure, or GCP security logging and identity services.
• Financial services experience, relevant security certifications, or a degree in computer science, cybersecurity, information systems, or a related field.

Culture & Benefits

• Fast-paced, entrepreneurial technology environment with iterative design and rapid development.
• Active mentoring, collaborative problem solving, and opportunities to translate ideas into operational solutions.
• Medical, dental, vision, and FSA benefits.
• Paid time off, life insurance, a 401(k) plan, discretionary bonuses, and potential equity or other incentive compensation.