SOC Specialist (Crypto)

Location: Hybrid role based in Malta with flexibility within European hours; conditions also state Europe / Remote and EU Time Zone.

Company

hirify.global is a multi-jurisdictional licensed crypto platform headquartered in Switzerland, providing institutional payments, trading, custody, asset management, and stablecoin and fiat rails.

What you will do

• Monitor, analyze, and investigate security events across Microsoft Sentinel and Microsoft Defender XDR.
• Lead incident response from triage and investigation through containment, eradication, and post-incident review.
• Write, tune, and optimize KQL detection rules and analytic use cases, mapping attacker behavior to MITRE ATT&CK.
• Onboard and maintain log sources across endpoint, identity, cloud, and network layers, including parsing, normalization, and ingestion troubleshooting.
• Conduct proactive threat hunting, manage alert escalations, and communicate findings to technical, executive, and non-technical stakeholders.
• Build SOC automation, playbooks, runbooks, and escalation procedures while collaborating with IT, DevOps, and engineering.

Requirements

• At least 3 years of hands-on experience in a SOC environment.
• Deep expertise with Microsoft Sentinel, including Azure Sentinel, as a primary SIEM platform.
• Strong proficiency in Microsoft Defender XDR and advanced KQL skills for detection rule authoring, query optimization, and custom analytics.
• Solid experience integrating log sources, including onboarding, parsing, normalization, and troubleshooting ingestion pipelines.
• Ability to lead or independently execute incident response investigations.
• Strong understanding of MITRE ATT&CK and modern adversary techniques.
• Experience managing alert escalation processes and communicating findings under pressure.
• Working knowledge of information security frameworks such as ISO 27001 or NIST.
• Fluent English with clear, professional written and verbal communication.
• Relevant stack: SOAR / Logic Apps, incident response, threat hunting, and log source management.

Nice to have

• Experience with SOC automation using SOAR platforms, Logic Apps, or custom scripting.
• Background in crypto, fintech, or regulated financial services environments.
• Familiarity with Swiss or EU regulatory frameworks, including DORA, FINMA, or MiCA.
• Experience integrating and operationalizing threat intelligence.

Culture & Benefits

• Build the SOC from the ground up with ownership and direct impact.
• Work directly with the CISO in a lean, expert-level security team.
• Work on institutional crypto OTC trading and its complex, high-stakes threat landscape.
• Hybrid work based in Malta with flexibility within European hours.

Hiring process

• Submit an application to proceed to the next steps.