Signals and Defense Engineer, Senior (Cybersecurity)

Location: Remote in the United States; occasional work may be required at a Booz Allen or customer facility. U.S. citizenship is required.

Salary: $86,800–$198,000 annualized USD.

Company

hirify.global provides professional services, systems integration, advisory, and consulting work with a focus on cybersecurity and national security-related environments.

What you will do

• Investigate security alerts, suspicious activity, and incidents across endpoint, network, identity, cloud, application, and infrastructure environments.
• Perform triage, scope impact and root cause, and support containment, eradication, and recovery with incident response and partner teams.
• Conduct hypothesis-driven threat hunts using threat intelligence, adversary behavior, MITRE ATT&CK, and large volumes of security telemetry.
• Use SIEM, EDR/XDR, network, cloud security, threat intelligence, and analytics platforms, including AWS, Azure, and GCP environments.
• Translate findings into detection logic, monitoring improvements, telemetry enhancements, and actionable remediation.
• Document investigations and playbooks, participate in post-incident reviews, and communicate findings to technical and non-technical stakeholders.

Requirements

• 3+ years of cybersecurity experience involving threat hunting, incident response, security operations, detection engineering, or security investigations.
• Experience conducting hypothesis-driven hunts and identifying malicious activity missed by existing controls.
• Experience analyzing endpoint, network, identity, cloud, application, and authentication telemetry, and using SIEM, EDR/XDR, or security data platforms.
• Experience using AI, machine learning, automation, or agentic security technologies for investigation, enrichment, correlation, or threat hunting.
• Experience with cloud security investigations across AWS, Azure, or GCP, including identity activity, audit logs, workloads, and cloud attack techniques.
• Knowledge of adversary tactics, techniques, and procedures and practical MITRE ATT&CK application.
• Knowledge of Windows and Linux environments, including logs, processes, command-line activity, authentication events, and forensic artifacts.
• Ability to turn hunt findings into incident response actions, including validation, scoping, containment recommendations, eradication support, and recovery.
• HS diploma or GED.

Nice to have

• Experience tuning detection analytics with SIEM queries, behavioral rules, correlation logic, or detection-as-code methodologies.
• Scripting or automation experience with Python, PowerShell, Bash, SQL, or similar languages; familiarity with NIST SP 800-61, MITRE ATT&CK, Cyber Kill Chain, or ISO/IEC 27035.
• Cloud incident response and forensics experience involving audit logs, identity services, containers, Kubernetes, Docker, or serverless workloads.
• Network analysis experience with packet captures, Zeek, DNS telemetry, proxy data, or network flow records.
• Experience with malware analysis, digital forensics, endpoint investigation, or memory and disk artifact analysis.
• Professional services, systems integration, advisory, or consulting experience and collaboration across SOC, incident response, threat hunting, detection engineering, threat intelligence, cloud security, and infrastructure teams.
• Knowledge of AI threats and attacks; ability to manage multiple investigations; strong analytical, investigative, collaboration, and communication skills.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.

Culture & Benefits

• Full-time employment with health, life, disability, financial, and retirement benefits and paid leave.
• Professional development, tuition assistance, work-life programs, dependent care, and recognition awards.
• Employees working at least 20 hours per week regularly may participate in benefit programs; employees below that threshold receive select offerings only.
• Virtual employees are generally expected to keep cameras on during meetings; remote work may occasionally require presence at a Booz Allen or customer facility.
• Identity verification uses biometrics and artificial intelligence, and candidates are expected to be on camera during interviews and assessments.
• Use of AI tools during interviews is prohibited unless explicit permission is provided.

Hiring process

• Complete identity verification with advanced biometrics and participate on camera during interviews and assessments.
• Do not use artificial intelligence or other tools to assist with interview responses unless explicitly permitted.