Cyber Defense Specialist (AI)

Location: Austria; work-from-home options are available from Austria.

Salary: minimum EUR 3,375.40 gross per month under the applicable Austrian Banking Collective Agreement; actual salary is determined individually.

Company

hirify.global is a banking group serving more than 17 million customers across Austria and Central and Eastern Europe.

What you will do

• Provide SOC security monitoring through triage, investigation, communication, and reporting.
• Conduct threat hunting, threat modelling, and threat intelligence activities; identify threat vectors and develop monitoring use cases.
• Configure, maintain, validate, and tune SIEM detections by reproducing attacker techniques in a lab environment.
• Participate in purple-team exercises and review automated attack-simulation results to convert coverage gaps into engineering and tuning tasks.
• Assess incident damage to data and infrastructure, review recovery options, and recommend mitigation solutions.
• Help build an agentic SOC through AI-assisted triage, hunting, reporting, detection-as-code, SOAR playbooks, and monitoring of AI and LLM workloads.

Requirements

• Hands-on experience in security monitoring and incident detection within a Security Operations Center.
• Strong understanding of the MITRE ATT&CK framework, the Cyber Kill Chain, and other attack models.
• Hands-on experience configuring, maintaining, and improving SIEM platforms.
• Practical understanding of common attack techniques, including the ability to reproduce techniques in a lab and identify their telemetry traces.
• Ability to write Python or PowerShell scripts for task automation, security-data enrichment, and detection validation.
• Practical daily experience with LLM-based tools, including effective prompting, recognizing unreliable output, and verifying results before acting.

Nice to have

• Familiarity with BloodHound, Impacket, Mimikatz, C2 frameworks, and the forensic artefacts they leave behind.
• Experience with ATT&CK-aligned testing using Atomic Red Team, Caldera, or breach and attack simulation platforms.
• Experience with cyber threat intelligence platforms.
• Awareness of AI and LLM risks such as prompt injection and data leakage, plus familiarity with the OWASP Top 10 for LLM Applications.
• Vendor-independent security certifications such as CISA, CRISC, CISSP, or CEH.
• OSCP, GPEN, or equivalent advanced-lab experience such as Hack The Box Pro Labs.

Culture & Benefits

• Flexible hours and work-from-home options from Austria.
• English is the company language; work permit support is available in a global community of more than 75 nationalities.
• Continuous learning, training, career development, and access to new technologies.
• Subsidized canteen, well-being programs, health check-ups, sport allowances, discounts, banking terms, and a free public transport pass.
• Child allowances, gender-neutral parental leave, bilingual company kindergarten, and holiday childcare.