Cyber Security Analyst

Location: Rockville, MD, primarily onsite

Company

hirify.global supports enterprise cybersecurity operations through security monitoring, incident response, detection, and continuous improvement.

What you will do

• Monitor, triage, enrich, analyze, and escalate security alerts from Splunk Enterprise Security and other approved cybersecurity technologies.
• Investigate endpoint, account, network, malware, phishing, authentication, policy-violation, and other cybersecurity events using multiple data sources.
• Develop investigation timelines, collect and preserve evidence, document findings, and maintain accurate SIRT records.
• Support incident response activities including investigation, containment, remediation, recovery, high-criticality response, and post-incident reviews.
• Provide analyst feedback on detections, false positives, playbooks, workflow improvements, SOC automation, and AI-assisted cybersecurity capabilities.
• Maintain procedures and documentation, support operational metrics, and contribute to SIRT knowledge sharing and cross-training.

Requirements

• Experience supporting cybersecurity operations, security monitoring, incident response, or comparable cybersecurity functions.
• Experience reviewing and analyzing security alerts and event data.
• Working knowledge of SIEM technologies, preferably Splunk Enterprise Security.
• Understanding of common cybersecurity threats, attack techniques, indicators of compromise, and incident-response processes.
• Familiarity with endpoint, network, identity, authentication, and security-log analysis.
• Familiarity with MITRE ATT&CK or comparable threat frameworks.
• Ability to analyze information from multiple security sources, develop defensible conclusions, and communicate findings clearly.
• Strong troubleshooting, analytical, documentation, and communication skills, with the ability to collaborate with senior analysts, security engineers, system administrators, and other technical personnel.

Nice to have

• Hands-on experience with Splunk Enterprise Security, Microsoft Defender for Endpoint or comparable EDR technologies, and telemetry from Windows, Active Directory, Entra ID, networks, firewalls, DNS, and endpoints.
• Familiarity with vulnerability-management platforms such as Tenable, ServiceNow or comparable case-management systems, and threat intelligence or enrichment tools.
• Experience investigating phishing, malware, suspicious authentication, endpoint, account, and network-security events.
• Experience in federal government or similarly regulated environments.
• Security+, CySA+, GCIH, GCIA, or comparable cybersecurity certification.

Culture & Benefits

• Primarily onsite work in Rockville, Maryland.
• Work alongside the Senior Cybersecurity Analyst, SOC Lead, Detection Engineer, Vulnerability Management personnel, and other technical teams.
• Contribute to SIRT performance through improved triage effectiveness, investigation quality, escalation, operational efficiency, and continuous improvement.