Security Analyst (Microsoft Azure)

Location: Remote anywhere within the United States; occasional travel to data center facilities, customer locations, or hirify.global headquarters in Rochester, New York. Candidates within driving distance of Rochester are strongly preferred. Standard hours are Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with flexibility for employees elsewhere in the U.S.; on-call, periodic evening, and weekend work are required.

Company

hirify.global is the employer for this cybersecurity role; additional company information is not provided.

What you will do

• Define, validate, document, and report security controls aligned with NIST CSF 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, cyber insurance attestations, and recognized audit practices.
• Strengthen identity, endpoint, cloud, and data protection using Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, KQL, Intune, Defender for Cloud, Azure Policy, Microsoft Purview sensitivity labeling, and DLP.
• Oversee the MDR provider, vulnerability and exposure management, remediation SLAs, security ticket workflows, evidence validation, risk trends, and third-party/vendor security reviews.
• Lead incident response as the primary security contact, maintaining playbooks, escalation procedures, tabletop exercises, on-call coverage, and security awareness training.
• Validate ransomware resilience through immutable backup evidence and recurring recovery testing; create security reports and management dashboards.
• Provide backup support for network, server, and cloud administration, assist with security budgets and purchases, and liaise with security and IT professionals at BlueCrest and Platinum.

Requirements

• 5+ years of cybersecurity operations experience or equivalent experience.
• Strong understanding of secure network architecture and networking principles, with the ability to assess Juniper and Cisco switches and Fortinet firewalls.
• Knowledge of Windows, macOS, and Linux operating systems.
• Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy.
• Experience supporting SOC 2 Type II audits, including control validation and evidence collection; familiarity with NIST CSF 2.0 and CIS Controls.
• PowerShell scripting and KQL query skills for security operations, investigation, and automation.
• Ability to respond quickly to critical problems and participate in an on-call rotation with after-hours response expectations.
• Strong written and verbal communication skills, including defining security SLAs, evaluating evidence, reporting risk, and communicating requirements to technical and business stakeholders.
• Understanding of adversary tactics and tooling, including MITRE ATT&CK, Cobalt Strike, and Mimikatz, sufficient to detect, hunt, and validate controls.

Nice to have

• One or more relevant security certifications, including Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or CISSP.

Culture & Benefits

• Full-time, exempt employment.
• Remote work is available anywhere within the United States, with time zone flexibility coordinated with the manager.
• Staggered coverage may be advantageous because operations and customers span U.S. time zones.
• Periodic travel, evening and weekend work, planned maintenance windows, security testing, and incident response are part of the role.
• Equal employment opportunity and affirmative action apply to the application process and employment.