Senior Threat Analyst 1 (Cybersecurity)

Location: Remote in Romania; legal authorization to work in Romania is required, and employer sponsorship is not available. Participation in night, weekend, and holiday shifts is required for 24x7x365 MDR coverage.

hirify.global is a cybersecurity company providing AI-driven managed detection and response and endpoint, network, email, cloud, XDR, ITDR, and SIEM security solutions.

What you will do

• Monitor, investigate, and respond to alerts from the hirify.global security stack, including EDR/XDR, endpoint, network, and malware detection systems.
• Perform end-to-end analysis of suspicious activity, phishing emails, binaries, behavioral anomalies, active threats, and vulnerabilities.
• Conduct threat hunting across customer environments and identify attacker behaviors, IOCs, exploits, and MITRE ATT&CK techniques.
• Lead and mentor Tier I Analysts through escalated cases and support real-time incident containment, mitigation, and recovery.
• Document investigations, manage case workflows, communicate with clients through chat, phone, and tickets, and complete detailed global-team handovers.
• Improve detections, playbooks, Security Operations processes, knowledge bases, and tooling based on recurring false positives and investigation findings.

Requirements

• 3+ years of hands-on experience in a SOC, MDR environment, or cybersecurity-focused IT role.
• Proficiency with endpoint and network security tools, including EDR, IDS/IPS, and malware detection platforms, with the ability to validate and triage complex alerts.
• Working knowledge of Windows workstation and server operating systems, plus experience with Linux environments such as Ubuntu, Debian, or Red Hat, or macOS.
• Ability to interpret Windows event logs and other telemetry data, with understanding of TCP/IP, protocols, routing, and traffic analysis.
• Experience contributing to real-time incident response and threat investigations, including containment, mitigation, and recovery of active threats.
• Exposure to threat hunting methodologies and ability to identify persistence, privilege escalation, lateral movement, and defense evasion in real-world environments.
• Familiarity with incident response workflows and Security Operations processes, together with strong analytical, troubleshooting, documentation, and attention-to-detail skills.
• Excellent communication skills for explaining findings to technical and non-technical audiences; customer-first professionalism; ability to work independently and collaboratively.
• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience; ability to communicate in English; willingness to work nights, weekends, and holidays.

Nice to have

• Familiarity with the MITRE ATT&CK framework and its use in detection and response.
• Experience with SIEM platforms and enterprise security telemetry.
• Ability to write and interpret SQL queries for analysis and investigation.
• Experience with OSQuery and scripting, particularly PowerShell.
• Relevant practical cybersecurity certifications such as GSEC, GCIA, GCIH, PEN-200, Security Blue Team L1, TCM Academy SOC L1, or similar.

Culture & Benefits

• Remote-first working model, with remote work as the primary option for most employees.
• Employee-led diversity and inclusion networks, global wellbeing days, wellbeing webinars, and health training.
• Volunteer days, charity initiatives, sustainability programs, and global fitness and trivia competitions.
• Inclusive environment committed to equal opportunity and reasonable adjustments during recruitment.
• Personal data may be retained for 12 months and used to contact candidates about this or relevant opportunities.