Назад
Company hidden
19 часов назад

Sr Security Analyst (SOC)

86 000 - 118 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Sr Security Analyst (SOC) (Cybersecurity): Investigating complex security incidents and improving detection and response across endpoint, network, cloud, email, and proxy environments with an accent on digital forensics, threat hunting, and SOC automation. Focus on correlating telemetry to determine root cause and impact, developing detection content and playbooks, and building tools that strengthen continuous 24x7 operations.

Location: Hybrid role hiring near the Irving, TX and Stamford, CT Centers of Excellence; the SOC operates 24x7 and requires rotating days, including weekends and holidays.

Base salary: USD 86,000–118,000 per year, plus participation in an annual bonus plan or role-based uncapped sales incentive plan.

Company

hirify.global provides analysis and technology insights to enterprise leaders globally, supporting over 13,000 client enterprises in approximately 90 countries and territories.

What you will do

  • Independently investigate complex security incidents from triage through scoping, containment, remediation, and closure, escalating high-impact events when needed.
  • Correlate evidence across SIEM, EDR, cloud, email, proxy, network, and supporting telemetry to determine root cause, scope, impact, and remediation.
  • Produce investigation notes, incident reports, and actionable outcomes for technical teams and business stakeholders.
  • Develop and tune detection content, investigative workflows, and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain, and other relevant frameworks.
  • Build automation and practical tools, conduct proactive threat hunting, and identify vulnerabilities, control gaps, misconfigurations, and anomalous activity.
  • Act as a technical escalation point, mentor analysts, share knowledge, and contribute to continuous improvement of the global SOC.

Requirements

  • Three to five years of experience in information security, security operations, incident response, or an equivalent hands-on role.
  • Proven experience triaging and investigating cybersecurity events and incidents, prioritizing effectively in time-sensitive environments.
  • Hands-on experience with SIEM or XDR, EDR, email security, web proxy, and digital forensics and incident response.
  • Experience investigating AWS, Azure, or GCP environments and working with SPL, KQL, SQL, or comparable query languages.
  • Practical threat-hunting experience.
  • Ability to automate with Python, PowerShell, Bash, or similar technologies and identify opportunities to reduce repetitive work.
  • Strong written and verbal communication, documentation, and stakeholder engagement skills, including the ability to explain technical issues clearly and support other analysts.
  • Curiosity, continuous learning, and a record of improving tools, processes, and team capability.

Nice to have

  • Red or purple team exposure.
  • A bachelor’s degree in cybersecurity, computer science, engineering, or equivalent practical experience.
  • Certifications such as GCIH, GCFA, or comparable credentials.

Culture & Benefits

  • Inclusive, security-first culture with knowledge sharing, thoughtful challenge, collaboration, and continuous improvement.
  • Flexible hybrid environment with work-from-home flexibility and collaboration in company offices.
  • 24x7 global SOC operations with modern security tools and investment.
  • 20+ PTO days plus holidays and floating holidays in the first year.
  • Medical, dental, and vision insurance; 401(k) with corporate match and immediate vesting; parental leave; tuition reimbursement; and health-and-wellness allowances.
  • Learning programs, mentorship, certification opportunities, employee stock purchase, employee assistance, and charity matching programs.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →