Security Analyst II (Cybersecurity)

Location: Hybrid in Orlando, Florida or Bentonville, Arkansas, with 2–3 days in office.

Company

hirify.global provides identity and access management, exposure management, risk programs, managed detection and response, and the Meridian entity fabric for connecting identities, assets, and access.

What you will do

• Perform advanced security triage and investigations across endpoint, server, network, and cloud environments.
• Conduct proactive threat hunting and investigate, isolate, and scope suspicious or malicious activity in client environments.
• Lead deep-dive incident investigations, identifying root causes, indicators of compromise, and potential business impact.
• Analyze alerts, logs, telemetry, network traffic, endpoint artifacts, and system logs using SIEM, EDR, and other security monitoring platforms.
• Use MITRE ATT&CK to map adversary tactics and techniques, assess detection coverage, and identify security posture gaps.
• Coordinate escalations, provide remediation recommendations, maintain investigation documentation and incident response runbooks, and participate in an after-hours on-call rotation as an Incident Controller when required.

Requirements

• 3+ years of progressive experience in cybersecurity, security operations, incident response, or a related IT security role.
• Strong experience with security investigations, incident triage, threat hunting, and advanced security analysis.
• Hands-on experience with EDR platforms such as CrowdStrike Falcon, SentinelOne, or Microsoft Defender for Endpoint.
• Advanced knowledge of at least one leading SIEM platform: Microsoft Sentinel, Splunk, Elastic Security, IBM QRadar, or Google Chronicle.
• Strong understanding of the MITRE ATT&CK framework, including mapping detections to adversary tactics and techniques.
• Experience analyzing security events, identifying indicators of compromise, and investigating malicious activity across enterprise environments.
• Previous experience with an MDR provider, MSSP, or enterprise SOC.
• Experience with SOAR platforms and security workflow automation.
• Familiarity with cloud security monitoring and incident investigations across Microsoft Azure, AWS, or Google Cloud.
• Experience developing or tuning SIEM detection rules, security use cases, and threat hunting queries.
• Experience supporting client-facing incident investigations and communicating technical findings to security stakeholders.
• Knowledge of vulnerability management, threat intelligence, and proactive security monitoring techniques.

Culture & Benefits

• Hybrid work model with 2–3 days in office.
• Medical insurance covering employees and dependents, life insurance, and a retirement match program.
• Maternity and paternity leave, paid time off, sick and casual leave, bereavement time, and volunteer time.
• Professional development reimbursement and access to a LinkedIn Learning and Development platform.
• Mobile phone reimbursement.