Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Средняя
$124к-229к/год
$140к$170кмедиана$230к
По похожим ролям (47) ~ $170к/год
На СНГ рынке: $4.2к/мес ($2.9к - $6.7к)
72
Хорошая вакансия
развернуть
Роль четко описана и включает сложную работу по реагированию на инциденты и безопасности ИИ, но середина зарплатного диапазона ниже медианы рынка, а дежурства повышают нагрузку.
Кликните для подробной информации
Ниже рынкаДежурстваСовременная безопасностьЧеткие задачи
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Expert Detection and Response Engineer (Cybersecurity): Detecting, investigating, and containing advanced cyber threats across cloud, corporate, endpoint, identity, and production environments with an accent on threat detection, digital forensics, incident response, and AI-assisted security operations. Focus on building SIEM detections, automating SOAR and LLM-assisted triage, hardening AI tooling against prompt injection and verdict poisoning, and performing complex root cause analysis.
Location: United States; occasional travel of up to approximately 10% may be required to support studios or on-site incident response.
Base pay: $124,000–$229,400 annually in the U.S.
Company
hirify.global develops, publishes, and distributes interactive entertainment, including major gaming franchises such as Call of Duty, Crash Bandicoot, Tony Hawk’s Pro Skater, and Guitar Hero.
What you will do
Detect, investigate, and respond to security incidents across cloud, corporate, endpoint, identity, and production environments.
Analyze security telemetry, audit logs, alerts, and forensic evidence throughout the incident lifecycle, from identification through containment, remediation, and post-incident review.
Build and refine SIEM detections based on attacker behavior, and automate investigations through scripting, SOAR workflows, and advanced analytics.
Design or operate AI/LLM-assisted triage and enrichment workflows integrated with case management platforms.
Evaluate and harden AI-assisted security tooling against prompt injection, verdict poisoning, hallucinated verdicts, and untrusted artifact content.
Maintain TDIR procedures, playbooks, runbooks, and metrics while collaborating with engineering teams, business stakeholders, vendors, and leadership.
Requirements
10+ years of progressively responsible security experience with expert-level incident response judgment.
Hands-on experience across threat detection, security operations, incident response, alert triage, log analysis, host and network forensics, timeline reconstruction, and root cause analysis.
Experience building or significantly extending detection content in SIEM and EDR platforms.
Scripting or programming experience with Python, PowerShell, or KQL.
Working knowledge of LLM applications in security operations and their failure modes, including injection through logs or artifacts and over-trust in model output.
Fluency in English, willingness to participate in on-call rotation, and availability for off-hours support are required.
Nice to have
12+ years of IT and security experience, including leadership or mentorship of less-senior analysts.
Malware analysis using static and dynamic techniques.
SOAR implementation or operation and AI-assisted triage integration into SOC workflows.
Identity-focused detection involving Active Directory, hybrid identity, and privileged account monitoring.
Cybersecurity community engagement or evidence of self-directed professional learning.
Culture & Benefits
Work within a global security operations organization supporting gaming studios, platforms, players, and enterprise environments.
Medical, dental, vision, healthcare spending, life, disability, and mental health benefits, subject to eligibility.
401(k) with company match, tuition reimbursement, charitable donation matching, and paid holidays and vacation.
Sick time, floating holidays, parental leave, bereavement leave, fitness programs, and free or discounted games.
Relocation assistance may be available when the company requires a geographic move for the role.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →