Senior Security Engineer, Detection & Response (SOC)

Location: Atlanta, GA preferred; remote applicants accepted from anywhere in the U.S. U.S. work authorization is required; visa sponsorship is not available.

Salary: $160,000–$175,000 per year

Company

hirify.global is a North American Daily Fantasy Sports platform covering major sports leagues and esports.

What you will do

• Own SIEM monitoring and triage, tune detection content, reduce false positives, and close coverage gaps.
• Design and continuously improve incident response playbooks and lead incident response activities.
• Lead threat hunting for malicious or anomalous activity not detected by existing alerts.
• Strengthen digital forensics processes, tooling, evidence handling, and investigations across host and cloud environments.
• Automate alerting, enrichment, triage, and response workflows using scripting and automation.
• Document incidents, conduct root-cause analysis, track remediation, and mature post-incident reviews, escalation paths, and IR metrics.

Requirements

• 5+ years of experience in SOC, incident response, or detection engineering, with ownership of an IR or monitoring program beyond queue work.
• Experience building or significantly maturing a SOC or IR function from an early-stage program to production readiness.
• Strong understanding of the full incident response lifecycle: preparation, detection, containment, eradication, recovery, and lessons learned.
• Hands-on SIEM experience with log ingestion, correlation rules, alert tuning, and detection content development; the platform is flexible.
• Digital forensics fundamentals covering host, network, and/or cloud evidence collection and analysis.
• Scripting and automation ability in Python or a similar language for triage and response workflows.
• Working knowledge of AWS, GCP, or Azure and familiarity with MITRE ATT&CK and common threat actor TTPs.
• Ability to define risk in technical and business-relevant terms and produce clear playbooks and incident documentation.

Nice to have

• GCIH, GCFA, GCIA, OSCP, or equivalent certification.
• SOAR platform experience.
• Experience in fintech, gaming, or another high-fraud-risk industry.
• Experience running detection and incident response for a distributed or remote workforce using endpoint and identity signals.

Culture & Benefits

• Full-time employment with company-subsidized medical, dental, and vision plans.
• 401(k) plan with company match, annual bonus, paid leave, disability benefits, and 16 weeks of paid parental leave.
• Flexible PTO, workplace flexibility, and modern work schedules focused on outcomes rather than hours clocked.
• Company equipment with Windows and Mac options, annual performance reviews, and career development opportunities.
• Company-wide in-person events, team outings, and a lifestyle enhancement program.

Hiring process

• The application period is expected to remain open for 30 days, subject to adjustment.
• Applicants must be authorized to work for any employer in the U.S.; employment visa sponsorship or transfer is unavailable.