Назад
Company hidden
5 дней назад

Security Operations Engineer (Cybersecurity)

140 971 - 228 870$
Формат работы
remote (только USA)/hybrid/onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Operations Engineer (Cybersecurity): Building and operating detection, incident response, threat hunting, and security automation capabilities across cloud, SaaS, identity, and on-premises infrastructure with an accent on AWS security, SIEM engineering, telemetry quality, and SOAR playbooks. Focus on leading complex incident containment, developing MITRE ATT&CK-aligned detections, and improving security operations reliability through automation and resilient on-call practices.

Location: US Remote; Jersey City, NJ. Remote and hybrid candidates are considered, but candidates living within a one-hour commute of a hirify.global office must work onsite most of the time. The role may also require an onsite interview.

Salary: $140,971–$228,870 per year, with potential eligibility for bonuses, commissions, or other compensation.

Company

hirify.global provides technology-enabled authentication, grading, vaulting, and sales services for trading cards, autographs, comics, coins, video games, tickets, and memorabilia.

What you will do

  • Build, tune, test, and manage high-confidence detections across AWS, GCP, Okta, Google Workspace, Microsoft 365, and vendor platforms.
  • Lead security incident triage, containment, forensics, remediation, and post-incident reviews as a senior responder.
  • Conduct threat hunts across cloud, SaaS, identity, and on-premises environments using MITRE ATT&CK and attacker tradecraft.
  • Design SOAR playbooks, integrations, and automation to reduce manual work and accelerate response.
  • Own security telemetry pipelines, including log onboarding, parser and schema quality, coverage analysis, and data quality.
  • Partner with infrastructure, platform, and engineering teams on secure architectures, vulnerability remediation, runbooks, and on-call improvements.

Requirements

  • 5+ years of experience in security operations, incident response, or detection engineering, including at least 2 years in a senior cloud-native environment.
  • Hands-on AWS security experience at scale, including IAM, CloudTrail, GuardDuty, Security Hub, EC2, EKS, and Lambda.
  • Strong SIEM experience building detections, writing complex queries, and managing log pipelines.
  • Proficiency in a general-purpose scripting or programming language, preferably Python, with experience building automation, integrations, and SOAR playbooks.
  • Experience leading incident response, communicating with technical and executive audiences, and influencing cross-functional engineering work.
  • Candidates must be authorized to work in the United States. Familiarity with PCI, NIST, ISO, or SOX compliance frameworks is required.

Nice to have

  • Familiarity with GCP or Azure.

Culture & Benefits

  • Medical, dental, and vision insurance for full-time employees.
  • 401(k) matching, flexible paid time off, and ten company-paid holidays.
  • Fertility, commuter, educational assistance, and employee discount benefits.
  • Flexible schedules and participation in team celebrations and events.
  • Shared on-call rotation with an emphasis on sustainable operations and continuous learning.

Hiring process

  • Video interviews require cameras to be on; some steps may take place by phone.
  • Remote candidates may be asked to participate in an onsite interview during the final stages.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →