Security Operations Analyst (Tier 2)

Location: Hybrid, USA - Nevada (LV Summerlin), United States of America; participation in a 24x7 rotating shift roster, including on-call and occasional weekend coverage.

Company

hirify.global delivers gaming experiences for players worldwide.

What you will do

• Own MSSP customer concerns and medium- and high-severity alerts from scoping through investigation, timeline construction, evidence review, and defensible conclusions.
• Investigate phishing, malware, and credential-compromise cases using endpoint, identity, network, cloud, SIEM, EDR, SOAR, and MSSP data.
• Complete approved containment and remediation actions, including host isolation, account disablement, credential resets, and IOC blocking, while documenting every action.
• Review MSSP triage quality, identify detection and tuning gaps, propose suppressions or enrichments, and validate detection changes.
• Produce complete and reproducible case documentation, escalate investigations with hypotheses and evidence, and contribute to playbooks, runbooks, and knowledge-base improvements.
• Support specialist-led threat hunts and incident response through evidence gathering, technical analysis, and root cause analysis.

Requirements

• At least 2 years of hands-on SOC or security operations experience, including ownership of investigations beyond initial triage.
• A bachelor's degree in information systems, cybersecurity, or a related field, or equivalent experience.
• Proficiency with CrowdStrike Query Language (CQL) or transferable SIEM query languages such as KQL or SPL, plus hands-on EDR experience with live response, process-tree analysis, and host isolation.
• Working knowledge of Windows, Linux, and Active Directory or Entra ID attack patterns, with the ability to read authentication, process, and network logs without a playbook.
• Understanding of incident response, phishing and malware investigations, and MITRE ATT&CK mapping for observed behavior.
• Cloud security monitoring experience with AWS, Azure, or GCP; scripting with Python or PowerShell; and SOAR or automation experience.
• Exposure to detection tuning or threat hunting.
• Ability to participate in a 24x7 rotating shift roster, including on-call and occasional weekend coverage.

Nice to have

• Security+, ISC2 SSCP, Microsoft SC-200, CrowdStrike CCFA or CCFR, Blue Team Level 1 or 2, GCIA, GCIH, or CySA+ certification.

Culture & Benefits

• Structured mentoring program and opportunities to develop within a modern SOC environment.
• Collaboration with global teams.
• Depending on role and location, eligibility for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits.
• Compensation is determined based on skills, experience, qualifications, and location.

Hiring process

• Specific compensation and benefits details are discussed during the recruitment process.