Staff Security Operations & Vulnerability Management Engineer (Cybersecurity)

Location: Brno, Czech Republic; hybrid 3+2 with a minimum of 3 days at the office and mandatory Tuesdays and Wednesdays.

Company

hirify.global develops simple, powerful, and secure solutions that help customers accelerate business transformation.

What you will do

• Define the threat and vulnerability management strategy, roadmap, operating standards, and architecture.
• Establish risk-based prioritization using exploitability, active exploitation, threat intelligence, reachability, asset criticality, and business context.
• Lead cross-team remediation of urgent and systemic exposures while balancing risk, technical debt, and product reliability.
• Build integrations and automation across scanners, asset inventories, cloud platforms, CI/CD, ticketing, and security systems.
• Translate emerging threats and MITRE ATT&CK techniques into exposure assessments, hunts, detections, and guidance; lead zero-day assessments and act as a Tier 3 escalation point or Incident Commander.
• Define executive risk-reduction metrics and mentor engineers on scalable security practices.

Requirements

• Extensive experience in security engineering, SecOps, or vulnerability management, with Staff-level technical leadership and organization-wide influence.
• Deep hands-on experience with Tenable, Qualys, or Rapid7 and the full vulnerability lifecycle.
• Experience applying threat and vulnerability management across cloud, containers, endpoints, infrastructure, and CI/CD workflows; familiarity with AWS, Azure, and/or GCP.
• Strong risk judgment across exploitability, exposure, asset context, and threat intelligence, with the ability to explain practical risk to engineers and executives.
• Ability to automate and analyze security data using Python, PowerShell, SQL, or equivalent, including APIs and data integrations.
• Practical knowledge of NIST CSF and MITRE ATT&CK, plus experience leading complex incident or vulnerability response.
• Ability to influence across teams, mentor others, and build capabilities that scale beyond individual execution.
• Full-time employment under an employment contract (HPP) is required.

Nice to have

• Threat hunting, detection engineering, penetration testing, or exploit-analysis experience.
• CISSP, GCIH, GEVA, CCSP, or a cloud security certification, or equivalent education and experience.

Culture & Benefits

• People-first, collaborative, accountable, and empathetic working environment.
• 25 vacation days, 3 sick days, 10 study days, and 2 volunteering days per year.
• Four weeks of holidays after five years of tenure and sabbatical leave.
• Up to 48,300 CZK annual personal education budget, LinkedIn Learning, and English/Czech classes.
• Pension or life-insurance matching up to 3% of salary or 4,000 CZK per month, plus a 95 CZK daily meal allowance.
• Additional employee assistance, referral, appreciation, donation matching, sports, and office benefits.