Senior Security Analyst

Location: Fully remote, based anywhere in Germany

Company

hirify.global provides active cyber insurance combining insurance coverage with cybersecurity tools to help businesses prevent and manage cyber risk.

What you will do

• Assess the security posture of insureds and prospective insureds across technologies, controls, programs, and business environments.
• Investigate security incidents and cyber insurance claims, identifying root causes, attack vectors, control gaps, and prevention opportunities.
• Advise customers and security leaders on prioritized improvements involving architecture, cloud security, data protection, and compliance.
• Translate threat intelligence and attacker behavior into detection tradecraft and actionable security recommendations.
• Partner with Product and cross-functional stakeholders to improve risk models, underwriting approaches, and security-focused applications.
• Track emerging security practices, regulatory developments, and industry trends to inform products, processes, and customer guidance.

Requirements

• 4–6 years of experience in security analysis, blue-team or defensive security, penetration testing, red-team operations, incident response, or a related discipline.
• Expert understanding of network threat lifecycles, attack vectors, exploitation methods, and attacker TTPs.
• Knowledge of TCP/IP protocols, network analysis, log analysis, network traffic capture analysis, and network and security applications.
• Ability to investigate incidents and claims, determine root cause, and recommend effective preventive or detective controls.
• Familiarity with NIST, ISO, HIPAA, and PCI frameworks and their practical application.
• Strong written and verbal communication skills, including the ability to provide clear recommendations to technical and executive audiences.
• Ability to work effectively in a fast-paced, evolving environment and help improve processes and products.
• Fluent written and verbal communication skills in both English and German are required.

Nice to have

• Experience analyzing cyber insurance claims or translating security findings into underwriting, rating, or risk-scoring inputs.
• Hands-on experience with cloud security, security architecture, data protection, or security control assessments.
• Background in threat intelligence and developing detection tradecraft from observed attacker behavior.
• Experience advising CISOs or customers on prioritizing security improvements based on risk, feasibility, and business context.
• Ability to create or improve internal security processes, products, or analytical methodologies.

Culture & Benefits

• Full-time employment contract in Germany with a remote-first work setup.
• Supplemental preventative medical insurance and AD&D insurance, fully covered by the employer.
• 30+ paid vacation days.
• Annual home-office stipend and access to coworking spaces.
• Mental and physical health wellness programs.
• Inclusive, collaborative environment with opportunities for advancement.