Назад
Company hidden
3 дня назад

Security Operations & Detection Engineer (SecOps) – AI Cloud

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Operations & Detection Engineer (SecOps) – AI Cloud (AI Cloud Security): Monitoring and responding to security incidents across GPU/AIDC infrastructure, the cloud platform, and public-facing services with an accent on real-time triage, containment, and detection engineering. Focus on tuning SIEM, HIDS, and WAF alerts, building agentic triage workflows, and coordinating incident handoffs across US Pacific and Singapore operations.

Location: Los Angeles, CA or San Jose, CA; regular US Pacific daytime hours with weekend on-call rotation.

Company

hirify.global develops Bitcoin mining infrastructure, AI computational infrastructure, data centers, and cloud capabilities for artificial intelligence workloads.

What you will do

  • Monitor, triage, contain, and escalate P1/P2 security incidents across GPU/AIDC infrastructure, the cloud platform, and public-facing services.
  • Meet incident-response SLAs, including P1 acknowledgment within 15 minutes and response initiation within 30 minutes.
  • Build and tune detection rules in the internal SIEM, HIDS, and WAF telemetry to reduce false positives.
  • Develop and refine agentic alert-triage workflows to automate routine responses and reduce operational noise.
  • Conduct daily written and live handoffs with the Singapore security team.
  • Write post-incident reports and collaborate with the global security organization.

Requirements

  • 3+ years of hands-on experience in SOC, incident response, or detection engineering, including primary on-shift response.
  • Strong Linux and Kubernetes fundamentals, with experience across cloud platforms and bare-metal or GPU environments.
  • Practical SIEM query experience with OpenSearch, Splunk DSL, or similar tools.
  • Scripting experience in Python or Go.
  • Experience with Falco, Wazuh, auditd, host-based detection, log analysis, and standard incident-response tooling.
  • Ability to work US Pacific daytime hours and participate in a weekend on-call rotation.

Nice to have

  • Incident response experience involving crypto-mining malware or supply-chain security incidents.
  • Exposure to eBPF-based detection or runtime security tools such as Tetragon and Falco internals.
  • Experience with NVIDIA DGX/HGX, InfiniBand, or RoCE networking.
  • Professional Mandarin fluency for collaboration with the Singapore engineering site.
  • GCIH, GCIA, CISSP, or similar industry certification.

Culture & Benefits

  • Hands-on technical role focused on security operations and engineering rather than policy or management.
  • Close collaboration with a global security team and the Singapore engineering site.
  • Work across AI Cloud production infrastructure, cloud services, and public-facing systems.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →