IT Cyber Defense Lead (Hybrid Office Schedule)

Location: Hybrid schedule based onsite in Duncan, South Carolina, USA. The role includes on-call availability outside standard business hours during active security incidents, occasional access to manufacturing floors, and potential travel to domestic and international hirify.global sites.

Company

hirify.global manufactures fiber optic cables, connectivity products, and accessories, and provides engineering and installation services for major telecommunications customers worldwide.

What you will do

• Lead security operations covering threat monitoring, investigation, and response across the global organization.
• Own the endpoint detection, identity protection, and security analytics platform stack, including administration, tuning, roadmap planning, log onboarding, and telemetry coverage.
• Serve as incident commander for high-severity events, coordinating containment, investigation, communication, post-incident reviews, and corrective actions.
• Govern the managed detection and response provider and evaluate escalation quality, response times, and handoff accuracy.
• Develop detection content, threat-hunting hypotheses, automation playbooks, API integrations, runbooks, metrics, and escalation procedures.
• Partner with Systems, Network, and Application teams on control gaps, audits, cyber insurance requirements, customer assessments, and business resiliency planning.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent work experience.
• At least five years of security operations experience, including three or more years in a senior or lead capacity.
• Enterprise-scale administration of an endpoint detection and response platform; CrowdStrike Falcon experience is preferred.
• Hands-on incident response experience involving containment, investigation, and post-incident review of business-impacting events.
• Security analytics query-language proficiency, log source onboarding experience, and experience creating or tuning detection content against production telemetry.
• Working knowledge of MITRE ATT&CK, strong written and verbal communication, and the ability to work with technical teams and business leadership.

Nice to have

• CISSP, CISM, GCIA, GCIH, GCFA, GDAT, GCDA, or relevant vendor security platform certifications.

Culture & Benefits

• Hybrid in-office schedule for qualifying employees.
• Flexible time off policy.
• 401(k) company match of up to 4% on a dollar-for-dollar basis.
• Professional development, training, and tuition reimbursement programs.
• Medical, dental, vision, and life insurance options, with opportunities for career advancement.