Назад
Company hidden
17 часов назад

Security Analyst (SOC)

64 000 - 87 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
junior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Analyst (SOC) (Cybersecurity): Investigating security events and incidents, analyzing telemetry across SIEM, EDR, cloud, email, proxy, and network systems, and improving detection and response for a global SOC with an accent on incident response, threat hunting, and security automation. Focus on correlating evidence, developing MITRE ATT&CK-aligned detections and playbooks, and building tools that accelerate investigations and continuous SOC improvement.

Location: Hybrid, hiring near the Irving, TX and Stamford, CT Centers of Excellence; rotating days including weekends and holidays are required for 24x7 SOC coverage.

Base salary: USD 64,000–87,000 per year, plus eligible bonus or role-based incentive plan.

Company

hirify.global provides expert analysis and technology insights to enterprise leaders and operates globally across approximately 90 countries and territories.

What you will do

  • Triage and investigate security events and incidents from initial review through containment, remediation, closure, and escalation.
  • Correlate evidence across SIEM, EDR, cloud, email, proxy, network, and other telemetry sources.
  • Document investigations, summarize findings, and communicate actionable outcomes to technical teams and business stakeholders.
  • Develop detection content, investigative workflows, and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain, and related frameworks.
  • Build automation and practical tools to reduce repetitive work, accelerate investigations, and improve SOC effectiveness.
  • Conduct proactive threat hunting and identify suspicious behavior, vulnerabilities, control gaps, misconfigurations, and anomalous activity across endpoint, network, and cloud environments.

Requirements

  • At least two years of experience in information security, security operations, incident response, or an equivalent hands-on role.
  • Experience triaging and investigating cybersecurity events and incidents in time-sensitive operational environments.
  • Hands-on experience using SIEM or XDR platforms for log analysis, alert investigation, and detection development.
  • Working knowledge of EDR, web proxy, WAF, CSPM, IDS/NDR, and email security technologies.
  • Exposure to AWS, Azure, or GCP environments and ability to query data using SPL, SQL, KQL, or comparable languages.
  • Interest in automating repetitive work with Python, PowerShell, Bash, or similar technologies.
  • Clear communication, sound prioritization, proactive collaboration, curiosity, continuous learning, and an improvement-focused approach.

Nice to have

  • Bachelor’s degree in cybersecurity, computer science, engineering, or equivalent practical experience.
  • GCIH, GCFA, or comparable certifications.

Culture & Benefits

  • Inclusive, security-first culture with knowledge sharing, thoughtful challenge, and collaboration across geographies.
  • Flexible hybrid environment combining work from home with collaboration in company offices.
  • 20+ PTO days plus holidays and floating holidays in the first year.
  • Medical, dental, and vision insurance; 401(k) with corporate match and immediate vesting; parental leave; and wellness allowances.
  • Mentorship, apprenticeship, leadership, development, technical, and certification programs, plus tuition reimbursement.
  • Employee stock purchase, employee assistance, charity match, and other benefit programs.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →