Назад
Company hidden
9 дней назад

Expert Detection and Response Engineer (Cybersecurity)

124 000 - 229 400$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
c1
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Expert Detection and Response Engineer (Cybersecurity): Detecting, investigating, and containing advanced cyber threats across cloud, corporate, endpoint, identity, and production environments with an accent on threat detection, digital forensics, incident response, and AI-assisted security operations. Focus on building SIEM detections, automating SOAR and LLM-assisted triage, hardening AI tooling against prompt injection and verdict poisoning, and performing complex root cause analysis.

Location: United States; occasional travel of up to approximately 10% may be required to support studios or on-site incident response.

Base pay: $124,000–$229,400 annually in the U.S.

Company

hirify.global develops, publishes, and distributes interactive entertainment, including major gaming franchises such as Call of Duty, Crash Bandicoot, Tony Hawk’s Pro Skater, and Guitar Hero.

What you will do

  • Detect, investigate, and respond to security incidents across cloud, corporate, endpoint, identity, and production environments.
  • Analyze security telemetry, audit logs, alerts, and forensic evidence throughout the incident lifecycle, from identification through containment, remediation, and post-incident review.
  • Build and refine SIEM detections based on attacker behavior, and automate investigations through scripting, SOAR workflows, and advanced analytics.
  • Design or operate AI/LLM-assisted triage and enrichment workflows integrated with case management platforms.
  • Evaluate and harden AI-assisted security tooling against prompt injection, verdict poisoning, hallucinated verdicts, and untrusted artifact content.
  • Maintain TDIR procedures, playbooks, runbooks, and metrics while collaborating with engineering teams, business stakeholders, vendors, and leadership.

Requirements

  • 10+ years of progressively responsible security experience with expert-level incident response judgment.
  • Hands-on experience across threat detection, security operations, incident response, alert triage, log analysis, host and network forensics, timeline reconstruction, and root cause analysis.
  • Experience building or significantly extending detection content in SIEM and EDR platforms.
  • Scripting or programming experience with Python, PowerShell, or KQL.
  • Working knowledge of LLM applications in security operations and their failure modes, including injection through logs or artifacts and over-trust in model output.
  • Fluency in English, willingness to participate in on-call rotation, and availability for off-hours support are required.

Nice to have

  • 12+ years of IT and security experience, including leadership or mentorship of less-senior analysts.
  • Malware analysis using static and dynamic techniques.
  • SOAR implementation or operation and AI-assisted triage integration into SOC workflows.
  • Identity-focused detection involving Active Directory, hybrid identity, and privileged account monitoring.
  • Cybersecurity community engagement or evidence of self-directed professional learning.

Culture & Benefits

  • Work within a global security operations organization supporting gaming studios, platforms, players, and enterprise environments.
  • Medical, dental, vision, healthcare spending, life, disability, and mental health benefits, subject to eligibility.
  • 401(k) with company match, tuition reimbursement, charitable donation matching, and paid holidays and vacation.
  • Sick time, floating holidays, parental leave, bereavement leave, fitness programs, and free or discounted games.
  • Relocation assistance may be available when the company requires a geographic move for the role.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →