Назад
Company hidden
10 дней назад

Sr Cybersecurity Engineer

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Sr Cybersecurity Engineer (Azure/Microsoft 365): Leading cloud incident response investigations and developing repeatable detection and response capabilities across Azure and Microsoft 365 with an accent on identity compromise, forensic evidence, and threat hunting. Focus on investigating complex cloud attacks, optimizing KQL queries, building incident response playbooks, and automating evidence collection with Graph API and PowerShell.

Location: Hybrid in Arlington, Irving, or Fort Worth, Texas, United States; four days per week in the office.

Company

hirify.global operates a cybersecurity organization covering engineering, threat intelligence, vulnerability management, incident response, firewall, governance, risk, architecture, and offensive security.

What you will do

  • Lead Azure and Microsoft 365 security investigations involving identity compromise, privilege escalation, persistence, data exfiltration, and cloud service abuse.
  • Serve as the senior escalation point for complex cloud investigations and define response strategies.
  • Analyze Azure Activity Logs, Entra ID logs, Microsoft 365 Unified Audit Logs, Defender telemetry, and other forensic artifacts.
  • Develop and standardize cloud incident response playbooks, documentation, and repeatable response processes.
  • Design and refine cloud detections and alerts across Azure and Microsoft 365, including advanced KQL threat hunting.
  • Participate in an on-call rotation to support security incidents outside standard business hours.

Requirements

  • Extensive hands-on experience responding to security incidents in Microsoft Azure and/or Microsoft 365.
  • Knowledge of Microsoft Defender, Azure Sentinel, Azure architecture, Entra ID, tenant and subscription architecture, conditional access, and privilege management.
  • Advanced experience writing and optimizing KQL queries across Defender data sources.
  • Experience using Graph API, PowerShell, and automation to acquire evidence and accelerate investigations.
  • Knowledge of cloud logging, forensic artifacts, the NIST Incident Response Life Cycle, and the MITRE ATT&CK Framework.
  • Must be able to work in the United States without visa sponsorship. Three to five years of relevant experience is preferred; a high school diploma or equivalent is required.

Nice to have

  • Experience with Wiz and other cloud security platforms.
  • Cloud security engineering, architecture, or senior-level incident response experience.
  • Bachelor’s degree in a related field or equivalent experience.
  • Security certifications such as CISSP, CCNP-Security, GIAC, CEH, or CPTS.

Culture & Benefits

  • Hybrid work environment with four days per week in the office.
  • 401(k) matching and nine company holidays.
  • Paid bonding leave for new parents, including 12 weeks at 100% pay.
  • Tuition assistance, training, community service pay, and a GM employee auto discount.
  • Innovative workplace focused on integrity, community, belonging, and responsible use of AI tools.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →