Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$69к-158к/год
$120к$130кмедиана$140к
По похожим ролям (17) ~ $130к/год
84
Хорошая вакансия
развернуть
У роли четкий фокус на кибербезопасности, широкий опыт расследований и threat hunting, а также хороший пакет льгот. При этом требование гражданства США и возможная работа на площадке ограничивают доступность вакансии.
Кликните для подробной информации
Только для граждан СШАПонятные задачиАктуальная сфераРазвитие и льготыВозможны поездки в офис
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Signals and Defense Engineer, Mid (Cybersecurity): Investigating security events and conducting hypothesis-driven threat hunts across endpoint, network, identity, cloud, application, and infrastructure environments with an accent on incident response, MITRE ATT&CK, and security telemetry analysis. Focus on developing detection opportunities, analyzing cloud activity, leveraging AI and automation, and improving SOC visibility and response procedures.
Location: Remote, with possible work at a Booz Allen or customer facility; McLean, Virginia, USA. U.S. citizenship required.
Salary: $69,400–$158,000 annualized USD.
Company
hirify.global provides professional services, systems integration, advisory, and consulting services.
What you will do
Investigate security alerts, suspicious activity, and incidents across endpoint, network, identity, cloud, application, and infrastructure environments.
Perform incident triage, scope impact and root cause, and support containment, eradication, and recovery.
Conduct hypothesis-driven threat hunts using threat intelligence, adversary behaviors, emerging attack techniques, and MITRE ATT&CK.
Analyze security telemetry and use SIEM, EDR/XDR, network, cloud security, threat intelligence, and analytics platforms.
Translate findings into detection logic, monitoring improvements, telemetry enhancements, and actionable remediation.
Document investigations, improve response and hunting playbooks, participate in post-incident reviews, and communicate findings to technical and non-technical stakeholders.
Requirements
At least 1 year of cybersecurity experience with hands-on threat hunting, incident response, security operations, detection engineering, or security investigations.
Experience conducting hypothesis-driven threat hunts and applying adversary tactics, techniques, and procedures, including MITRE ATT&CK.
Experience analyzing endpoint, network, identity, cloud, application, and authentication telemetry for indicators of compromise and anomalous behavior.
Experience using SIEM, EDR/XDR, or security data platforms to query, correlate, and analyze large volumes of telemetry.
Experience using AI, machine learning, automation, or agentic security technologies for investigation, enrichment, correlation, or threat hunting.
Experience with cloud security investigations in AWS, Azure, or GCP, including identity activity, audit logs, workloads, and cloud attack techniques.
Knowledge of Windows and Linux, including system logs, processes, command-line activity, authentication events, and common forensic artifacts.
Ability to turn hunt findings into incident response actions, including validation, scoping, containment recommendations, eradication support, and recovery.
HS diploma or GED.
Nice to have
Experience with structured threat hunts, behavioral analytics, detection tuning, SIEM queries, correlation logic, or detection-as-code.
Scripting or automation with Python, PowerShell, Bash, SQL, or similar technologies; knowledge of NIST SP 800-61, MITRE ATT&CK, Cyber Kill Chain, or ISO/IEC 27035.
Experience with cloud incident response, containers, Kubernetes, Docker, or serverless workloads.
Experience with AI threats and attacks, network analysis, malware analysis, digital forensics, endpoint investigation, or memory and disk artifacts.
Experience in professional services, systems integration, advisory, or consulting environments and cross-functional security teams.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.
Excellent analytical, investigative, and collaborative skills.
Culture & Benefits
Full-time employment with health, life, disability, financial, and retirement benefits.
Paid leave, professional development, tuition assistance, work-life programs, and dependent care support.
Recognition awards for exceptional performance and demonstration of company values.
Remote employees may occasionally work at a Booz Allen or customer facility; virtual employees are generally expected to keep cameras on during meetings.
Hiring process
Identity verification uses advanced biometrics and artificial intelligence; candidates are expected to be on camera during interviews and assessments.
Use of AI or other tools to assist with interview responses is prohibited unless explicitly permitted.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →