Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Мало
$64к-87к/год
$50к$85кмедиана$100к
По похожим ролям (21) ~ $85к/год
70
Хорошая вакансия
развернуть
Чётко описанная роль в SOC крупной международной компании предлагает хорошие льготы и поддержку обучения, но зарплата ниже рыночной медианы, а смены по выходным и праздникам могут влиять на баланс работы и личной жизни.
Кликните для подробной информации
Ниже рынкаСменный графикСовременная безопасностьПонятные задачиХороший соцпакет
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Security Analyst (SOC) (Cybersecurity): Investigating security events and incidents, analyzing telemetry across SIEM, EDR, cloud, email, proxy, and network systems, and improving detection and response for a global SOC with an accent on incident response, threat hunting, and security automation. Focus on correlating evidence, developing MITRE ATT&CK-aligned detections and playbooks, and building tools that accelerate investigations and continuous SOC improvement.
Location: Hybrid, hiring near the Irving, TX and Stamford, CT Centers of Excellence; rotating days including weekends and holidays are required for 24x7 SOC coverage.
Base salary: USD 64,000–87,000 per year, plus eligible bonus or role-based incentive plan.
Company
hirify.global provides expert analysis and technology insights to enterprise leaders and operates globally across approximately 90 countries and territories.
What you will do
Triage and investigate security events and incidents from initial review through containment, remediation, closure, and escalation.
Correlate evidence across SIEM, EDR, cloud, email, proxy, network, and other telemetry sources.
Document investigations, summarize findings, and communicate actionable outcomes to technical teams and business stakeholders.
Develop detection content, investigative workflows, and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain, and related frameworks.
Build automation and practical tools to reduce repetitive work, accelerate investigations, and improve SOC effectiveness.
Conduct proactive threat hunting and identify suspicious behavior, vulnerabilities, control gaps, misconfigurations, and anomalous activity across endpoint, network, and cloud environments.
Requirements
At least two years of experience in information security, security operations, incident response, or an equivalent hands-on role.
Experience triaging and investigating cybersecurity events and incidents in time-sensitive operational environments.
Hands-on experience using SIEM or XDR platforms for log analysis, alert investigation, and detection development.
Working knowledge of EDR, web proxy, WAF, CSPM, IDS/NDR, and email security technologies.
Exposure to AWS, Azure, or GCP environments and ability to query data using SPL, SQL, KQL, or comparable languages.
Interest in automating repetitive work with Python, PowerShell, Bash, or similar technologies.
Clear communication, sound prioritization, proactive collaboration, curiosity, continuous learning, and an improvement-focused approach.
Nice to have
Bachelor’s degree in cybersecurity, computer science, engineering, or equivalent practical experience.
GCIH, GCFA, or comparable certifications.
Culture & Benefits
Inclusive, security-first culture with knowledge sharing, thoughtful challenge, and collaboration across geographies.
Flexible hybrid environment combining work from home with collaboration in company offices.
20+ PTO days plus holidays and floating holidays in the first year.
Medical, dental, and vision insurance; 401(k) with corporate match and immediate vesting; parental leave; and wellness allowances.
Mentorship, apprenticeship, leadership, development, technical, and certification programs, plus tuition reimbursement.
Employee stock purchase, employee assistance, charity match, and other benefit programs.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →