ASO Threat Analyst Manager (AI)

Location: Remote, USA; Overland Park, Kansas. Second shift, Tuesday-Friday from 12PM-11PM Eastern Time.

Company

hirify.global provides cybersecurity services, including a global 24/7/365 Agentic Security Operations service for multiple clients.

What you will do

• Lead daily shift execution, queue governance, alert velocity, workload balancing, and handoffs while meeting client SLAs and SLOs.
• Supervise human-in-the-loop operations by validating agentic AI triage, enriched telemetry, automated investigations, ticket quality, and evidence gathering.
• Act as the tactical incident lead and escalation point during critical P1/P0 events and client crises.
• Coordinate feedback loops with Detection Engineering, SOAR Engineering, Threat Hunting, and Client Success.
• Lead client incident discussions, de-escalate difficult interactions, and address recurring alerts, agent health issues, and policy misconfigurations.
• Coach analysts, manage shift coverage and on-call rotations, and support career development in threat hunting, detection engineering, and incident response.

Requirements

• 6-8+ years of Information Security experience, including strong foundations in threat analysis, network traffic analysis, or systems administration.
• 3+ years in an active SOC, MDR, or MSSP environment, including 1-2+ years in a tactical lead, supervisory, or senior escalation role.
• Experience with AI-assisted triage, SOAR playbooks, agentic security workflows, live incident triage, and multi-tenant queue management.
• Working knowledge of EDR/XDR and SIEM tools such as Google SecOps, CrowdStrike, SentinelOne, Microsoft Defender/Sentinel, or Splunk.
• Practical knowledge of MITRE ATT&CK, adversary tradecraft, ITIL-aligned ticketing workflows, and collaboration with Detection Engineering and SOAR automation teams.
• Bachelor’s degree in a technical field or equivalent experience, plus relevant certifications such as GCIH, GCIA, CySA+, or vendor certifications.

Nice to have

• Experience coaching senior technical staff and coordinating cross-team prioritization.
• Strong client de-escalation skills and experience briefing both frontline engineers and executive stakeholders.

Culture & Benefits

• Remote-from-home work capability where applicable.
• Work/life balance and professional training resources.
• Inclusive employee resource groups and volunteer opportunities through hirify.global Chips In.
• Opportunities to solve complex problems and work on unique cybersecurity projects.