Security Analyst (AI/Cybersecurity)

Location: Remote from Israel, London, or New York City

Company

hirify.global builds AI-driven cybersecurity and defense products that help companies detect and respond to threats in modern cloud, identity, endpoint, and SaaS environments.

What you will do

• Lead security investigations from initial signal through final verdict, determining impact, severity, and blast radius.
• Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry using AI-assisted investigation and hands-on log analysis.
• Recommend and execute authorized containment actions while explaining impact and next steps to customers.
• Conduct hypothesis-driven and AI-assisted threat hunts and turn findings into new cases and detections.
• Shape Apollo's investigative standards, response workflows, customer reporting, and analyst console as a founding analyst.
• Feed investigation insights into detection engineering and product improvements.

Requirements

• 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment at a senior or Tier 3 level.
• Investigation experience across Okta, Entra ID, AWS, Azure, GCP, EDR, Microsoft 365, and Google Workspace.
• Fluency in attacker tactics, techniques, and procedures, including MITRE ATT&CK.
• Experience with AI-assisted investigation or automation and strong judgment about its appropriate use.
• Strong customer-facing communication skills and excellent written analysis.
• Comfort working defined shifts as analyst coverage expands to 24x7.

Nice to have

• Experience in a multi-tenant MDR or MSSP practice.
• Detection rule writing or tuning with Sigma, YARA-L, SPL, KQL, or similar tools.
• Incident command, executive briefings, threat hunting, or DFIR experience.
• Daily use of AI or agentic coding tools to build security tooling.

Culture & Benefits

• Founding analysts help define the service, quality standards, workflows, and customer experience.
• Work on active defense cases with direct customer impact.
• Exposure to multiple customer environments and a broad range of attacker behavior.
• AI-native security operations that prioritize expert judgment, response, and customer outcomes.
• Autonomy, open communication, mentorship, learning, and collaboration with security and engineering specialists.