Cybersecurity Engineer III, Detection and Response (AI)

Location: Onsite in Plano, Texas, Monday through Friday, five days a week; travel between locations may be required.

Company

hirify.global operates the business environment in which security operations, cloud, product, and managed security capabilities are supported.

What you will do

• Design, develop, test, tune, and maintain security detections as code, mapping use cases to MITRE ATT&CK and validating effectiveness through adversary emulation, offensive testing, or controlled simulations.
• Build AI-assisted investigation, triage, detection-development, and response workflows with human decision points, accuracy checks, and data protection safeguards.
• Conduct threat hunts and investigate complex incidents across identity, endpoint, network, cloud, SaaS, and AI-enabled environments, coordinating containment, root cause analysis, remediation, and post-incident reviews.
• Engineer and maintain SIEM logging pipelines, including ingestion, parsing, normalization, integrations, telemetry quality, and logging requirements for new projects and products.
• Validate critical and known-exploited vulnerabilities, coordinate remediation verification, and implement compensating detections while fixes are underway.
• Partner with application, infrastructure, cloud, product, and managed security teams; develop automation, documentation, runbooks, and operational security metrics.

Requirements

• Five or more years of relevant experience across security operations, detection engineering, and incident response, with the ability to independently handle complex investigations and develop detections.
• Hands-on experience with modern SIEM and XDR platforms, including detection development, correlation logic, security query languages, and detection testing and tuning.
• Experience conducting threat hunts and investigating activity across identity, endpoint, cloud, and SaaS environments, including Microsoft Entra ID, Microsoft 365, AWS, and Azure.
• Demonstrated use of modern AI technologies for security investigations, detection engineering, or automation, including validation of AI-generated outputs and recognition of their limitations.
• Proficiency with Python, APIs, and security telemetry integrations, including log ingestion, parsing, normalization, and troubleshooting.
• Working knowledge of vulnerability assessment and exploitability validation, with strong analytical, technical documentation, and communication skills for engineering and executive audiences.
• Authorization to work in the United States without sponsorship is required; employment-based immigration sponsorship, including OPT or CPT, is not offered.

Nice to have

• Experience with detections as code, source control, automated detection testing, and deployment pipelines.
• Experience developing AI agents, AI-assisted investigation workflows, or security orchestration and automated response capabilities.
• Familiarity with adversary emulation, purple team exercises, offensive security testing, or threat modeling.
• Experience with infrastructure as code, configuration management, and automated deployment or validation of security integrations.
• Relevant certifications such as CompTIA Security+, GIAC GCIH, GCIA or GCED, Microsoft SC-200, AWS Certified Security – Specialty, or CISSP; equivalent practical expertise is valued.

Culture & Benefits

• Onsite work is required five days per week, Monday through Friday.
• Travel between locations may be required based on transformation and governance activities.
• hirify.global is an equal opportunity employer committed to nondiscriminatory employment decisions and an inclusive environment.

Hiring process

• Candidates are encouraged to provide a brief non-confidential example of a security detection, automation, AI-assisted workflow, or engineering solution they developed.
• Onsite schedule and employment eligibility are subject to HR confirmation.