Назад
Company hidden
13 часов назад

Threat Detection & Response Engineer III (Cybersecurity)

120 000 - 165 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Threat Detection & Response Engineer III (Cybersecurity): Building and maturing security detections, incident response capabilities, and security tooling across corporate and cloud environments with an accent on detection engineering, threat hunting, and incident investigations. Focus on designing MITRE ATT&CK-aligned detections, optimizing EDR and SIEM platforms, automating response workflows, and handling complex security incidents.

Location: Onsite in the Long Beach, California office; active security clearance required.

Base salary: $120,000–$165,000 per year, plus equity and benefits.

Company

hirify.global develops autonomous spacecraft, advanced payloads, mission software, and space-based interceptors for space superiority and security.

What you will do

  • Develop incident response plans, playbooks, SOPs, and scalable security operations processes.
  • Design, implement, and tune detections across corporate and cloud environments using frameworks such as MITRE ATT&CK.
  • Monitor, triage, investigate, contain, eradicate, and recover from security incidents, documenting findings and lessons learned.
  • Conduct threat hunting and use threat intelligence to anticipate adversary tactics, techniques, and procedures.
  • Administer and optimize EDR and SIEM platforms, integrate log sources, and improve visibility and correlation.
  • Build automation and orchestration workflows and collaborate with IT, Engineering, Legal, and Compliance.

Requirements

  • Active Secret or TS security clearance and ability to maintain it.
  • 3+ years of cybersecurity experience, including at least 2 years in security operations, detection engineering, incident response, or threat hunting.
  • Experience building or tuning security detections, including risk-based alerting and noise reduction.
  • Familiarity with EDR platforms, alert triage, response actions, SIEM platforms, and log analysis such as Splunk or Elastic.
  • Working knowledge of Windows, macOS, or Linux endpoint security and common attack techniques.
  • Understanding of common attack vectors, TTPs, MITRE ATT&CK, and the Cyber Kill Chain.
  • Experience with Python, PowerShell, or Bash scripting for automation or analysis.
  • Clear verbal and written communication skills.
  • Must satisfy U.S. Government ITAR eligibility requirements: U.S. citizenship, U.S. lawful permanent residence, protected individual status, or eligibility to obtain the required authorizations.

Nice to have

  • Digital forensics and malware analysis knowledge.
  • Experience building or significantly maturing a detection and response program.
  • Azure Government Cloud experience and cloud security monitoring in AWS, GCP, or Azure commercial environments.
  • Familiarity with CMMC, FedRAMP, NIST 800-53, or other federal compliance frameworks.
  • Experience with Detections-as-Code, GitOps, CI/CD, and red team or purple team exercises.

Culture & Benefits

  • Fast-paced, high-stakes environment requiring rapid decision-making, adaptability, autonomy, and ownership.
  • Required on-call rotation, including after-hours incident response coverage, and comfort working under pressure during active incidents.
  • Direct access to leadership and influence over security strategy, with collaboration among experienced security professionals.
  • Company-paid medical, dental, and vision coverage with HSA/HRA options, PTO or flexible time off, paid holidays, parental leave, and sick leave.
  • 401(k), fitness reimbursement, professional development and certification support, catered lunch for in-office employees, and equity participation.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →