Cyber Defense Analyst II (AI)

Location: Chicago - 20 S. Wacker, United States of America

Salary: $93,900–$156,500 per year, plus annual target bonus and equity opportunity.

Company

hirify.global operates a global derivatives marketplace and provides financial market infrastructure.

What you will do

• Analyze, triage, and validate security events across network, host, identity, and cloud telemetry, including GCP.
• Document, contextualize, and enrich security alerts for handoff to Incident Response and senior engineers.
• Identify repetitive SOC monitoring tasks and develop automation scripts or SOAR playbooks.
• Support the development, testing, and deployment of SIEM detection rules using Detection-as-Code, Git, and basic CI/CD workflows.
• Participate in hypothesis-driven threat hunts and operationalize threat intelligence into automated detections.
• Evaluate AI-assisted workflows and agentic triage outputs while maintaining monitoring, playbook, and detection documentation.

Requirements

• 1–3 years of experience in a Level 1 SOC environment or related Information Security role.
• Proficiency with Python, Rust, Java, or a related programming language for task automation, API interaction, or JSON/XML data processing.
• Working knowledge of network protocols, Windows/Linux/macOS operating system internals, and adversary tactics mapped to MITRE ATT&CK.
• Exposure to or hands-on experience with modern SOAR platforms such as Cortex XSOAR, Splunk SOAR, Torq, or Tines.
• Familiarity with cloud environments, preferably GCP or AWS, and cloud-specific telemetry.
• Interest in engineering practices including Git and basic CI/CD workflows.
• Willingness to learn and use emerging AI capabilities, including LLMs for security investigations.
• Strong analytical, problem-solving, communication, collaboration, and self-management skills, including the ability to balance alert analysis with automation and playbook development.
• BA/BS in Computer Science, Information Security, Engineering, or a related field; non-technical degrees are acceptable with appropriate Information Security experience and/or certifications.

Nice to have

• CompTIA CySA+, SANS GSEC, GCIA, AWS/GCP Cloud Practitioner or Security certification, or a foundational programming certification.

Culture & Benefits

• Continuous learning, critical thinking, and automation-focused SOC culture.
• Health coverage, a retirement package with 401(k) and pension plan, paid time off, and mental health benefits.
• Education reimbursement and flexibility in the benefits program.
• Annual target bonus opportunity and broad-based equity participation.
• Equal-opportunity workplace that values employees’ diverse experiences and perspectives.