Product Security Incident Response Analyst (Cybersecurity)

Location: Remote, United States; compensation and role coverage are based across the United States.

Base salary: USD $124,000.00–$329,200.00 per year, with potential additional bonus, stock, benefits, and sales incentives depending on role eligibility.

Company

hirify.global is an AI-powered developer platform and open-source software community used by developers and organizations worldwide.

What you will do

• Develop, implement, and continuously improve scalable solutions for product security incidents across hirify.global products.
• Investigate, scope, and resolve incidents using data analysis, application security, and digital forensics techniques.
• Identify, prioritize, and implement automation scripts and tools for incident response operations and case management.
• Analyze security metrics, KPIs, telemetry, anomalies, and trends to identify gaps and improve response capabilities.
• Collaborate with internal teams, external partners, architecture teams, and engineering teams to improve security design, remediation, and risk awareness.
• Coordinate incident communications, prepare risk and remediation reports, ensure compliance, and draft and publish CVEs with relevant teams and partners.

Requirements

• 7+ years of experience in product security, security analysis, security research, cybersecurity, security engineering, or a relevant area, or an equivalent combination of education and experience: Associate's Degree and 6+ years; Bachelor's Degree and 5+ years; Master's Degree and 3+ years; Doctorate and 1+ year.
• At least 1 year of experience investigating software product vulnerabilities within the development lifecycle using application security tools such as SAST, DAST, and SCA, and/or performing threat modeling, security design and architecture review, application security testing, and code review.
• Hands-on experience assessing product impact and collaborating with engineering teams to remediate security findings.
• At least 1 year of experience working with hirify.global and/or other open-source software platforms.

Nice to have

• 9+ years of experience in product security, security operations, security research, cybersecurity, security engineering, or a relevant area, including hands-on software vulnerability investigation, product security incident response, and remediation coordination.
• Experience coordinating remediation with engineering teams and drafting and publishing CVEs.
• Proficiency using SAST, DAST, and SCA to investigate vulnerabilities, validate findings, assess exploitability and product impact, and verify remediation.
• Relevant penetration testing, incident handling, or digital forensics certifications such as OSCP, GPEN, GCIH, GCFA, or GCFE; certifications do not substitute for product security experience.
• Experience working with hirify.global and/or other open-source software platforms.

Culture & Benefits

• Remote-first work environment with the role available remotely in the United States.
• Benefits and additional rewards, including annual bonus and stock, may be available depending on role eligibility.
• Learning and growth opportunities are provided.
• Values include customer focus, continuous learning, ownership, collaboration, diversity, and inclusion.