Назад
Company hidden
6 дней назад

Security Expert-Detection & Response (AI)

Формат работы
onsite
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Expert-Detection & Response (AI): Leading end-to-end incident response and investigations across cloud environments with an accent on DFIR, detection engineering, and scalable automation. Focus on handling high-severity incidents, building AI-assisted workflows, improving detection coverage, and driving root-cause analysis and post-incident remediation.

Location: London, United Kingdom; operates during EMEA business hours within a 24/7 global follow-the-sun on-call model.

Company

hirify.global is a NASDAQ-listed global technology and supply chain enterprise operating across retail, logistics, technology, property, and related services.

What you will do

  • Lead and coordinate end-to-end incident response for high-severity security events, from detection and triage through containment, eradication, and recovery.
  • Investigate complex incidents across cloud environments using digital forensics and incident response methodologies.
  • Build and improve automation and AI-assisted workflows for triage, investigations, response consistency, and remediation.
  • Prepare executive communications, maintain incident documentation, and develop runbooks and playbooks.
  • Partner with Threat Intelligence to contextualize threats and improve detection coverage.
  • Conduct root-cause analysis, lead post-incident reviews, mentor engineers, and improve incident response maturity.

Requirements

  • Strong experience in security incident response and investigations in cloud-first environments.
  • Hands-on experience with SIEM, EDR, and/or detection engineering.
  • Experience with AWS and GCP cloud platforms.
  • Familiarity with threat intelligence and adversary tactics, including MITRE ATT&CK.
  • Experience building or working with automation using Python, scripting, or SOAR platforms.
  • Ability to operate effectively during high-severity incidents.
  • Excellent written communication skills and a focus on clear, actionable documentation.
  • Proactive growth mindset focused on identifying and mitigating security risks.

Nice to have

  • Certifications in offensive security, security engineering, cyber defense, or cloud platforms.
  • Demonstrable experience building and deploying agentic AI workflows for detection, response, and remediation.
  • Experience with security competitions, Capture the Flags, or platforms such as Hack The Box, TryHackMe, Overthewire, or JD SRC.

Culture & Benefits

  • Work in a 24/7 global follow-the-sun security operations environment.
  • Collaborative, ownership-driven, and fast-paced working environment.
  • Competitive salary and a supportive, people-first culture.
  • Access to global projects and learning opportunities.
  • Inclusive workplace committed to equal employment opportunity.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →