Назад
Company hidden
6 дней назад

Sr. Security Analyst

90 000 - 120 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Sr. Security Analyst (Elastic SIEM/Cybersecurity): Investigating alerts, hunting threats, and operationalizing detection capabilities across network, cloud, and endpoint telemetry with an accent on Elastic SIEM operations, detection engineering, and customer-facing security services. Focus on correlating multi-source activity, developing detection rules and automation, supporting incident response, and improving SOC workflows.

Location: Work from home in Virginia, United States. Short domestic or international travel may be required. A valid U.S. Passport and at least a Secret clearance are required.

Salary: $90,000–$120,000 per year

Company

Everforth hirify.global provides managed cybersecurity and advanced technology solutions for defense, intelligence, and federal civilian agencies.

What you will do

  • Monitor networks and investigate alerts using IDS/IPS, firewalls, host-based security systems, and Elastic SIEM.
  • Correlate network, cloud, and endpoint telemetry to identify threats, indicators of compromise, and unauthorized activity.
  • Develop and tune SIEM detection rules, machine learning rules, dashboards, visualizations, and endpoint-based detections.
  • Triage alerts, analyze phishing submissions, document incidents, and support containment, mitigation, and root cause analysis.
  • Create or maintain Python and PowerShell scripts for investigation support, enrichment, automation, and telemetry integrations.
  • Train customer teams and improve runbooks, detection standards, triage playbooks, and SOC workflows.

Requirements

  • At least 2 years of cybersecurity experience.
  • Strong Elastic SIEM experience covering monitoring, detection, triage, and investigation; Kibana experience required, with Logstash or ingest pipeline familiarity preferred.
  • Strong cybersecurity fundamentals, including network protocols, encryption concepts, vulnerabilities, and multi-source analysis.
  • Experience creating and tuning SIEM rules, signatures, and dashboards, plus Python or PowerShell scripting.
  • Strong written and verbal communication skills and the ability to work independently under pressure.
  • Must possess and maintain a U.S. Passport and at least a Secret clearance.

Nice to have

  • Security Operations Center experience and familiarity with EDR, SIEM, SOAR, and ticketing tools.
  • Knowledge of threat actor tactics, techniques, and procedures.
  • Experience with AWS, Azure, GCP, Elastic observability data, or related security telemetry.
  • Certifications such as CISSP, CEH, GCIH, Elastic Certified Analyst, A+, Net+, Sec+, or GSEC.

Culture & Benefits

  • Remote work arrangement with support for mission-driven cybersecurity services.
  • Opportunities to work directly with customers on detection, response, and continuous improvement.
  • Professional environment focused on excellence, accountability, innovation, and talent development.
  • Benefits are provided by hirify.global.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →