Назад
Company hidden
4 дня назад

Senior Security Engineer - Identity & Endpoint

130 000 - 195 000$
Формат работы
remote (только USA)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer - Identity & Endpoint (Cybersecurity/AI): Designing, deploying, and optimizing identity, endpoint, and layered security controls with an accent on threat detection, hardening, automation, and AI-enabled security operations. Focus on leading threat hunts and purple-team exercises, investigating complex incidents, building SOAR workflows, and reducing attack-surface and response times.

Location: Illinois, United States of America; hybrid/remote workplace.

Salary: $130,000–$195,000 base salary annually, plus annual performance bonus and long-term incentives.

Company

hirify.global develops and operates a technical ecosystem supported by enterprise security engineering, layered defense, identity and endpoint protection, and security operations.

What you will do

  • Design, deploy, integrate, optimize, and manage endpoint, identity, access, and layered defense security controls.
  • Operate EDR/XDR, SIEM, identity security, privileged access, data security, and related security technologies.
  • Investigate complex endpoint and identity incidents through triage, forensic collection, root-cause analysis, containment, eradication, and remediation.
  • Lead threat-hunting engagements, purple-team exercises, exposure analysis, and control-efficacy testing mapped to MITRE ATT&CK and ATLAS.
  • Build SOAR workflows and convert hunts, findings, and alerts into automated detections, containment logic, and improved coverage.
  • Mentor junior and mid-level engineers, lead technical initiatives, document runbooks, participate in technical hiring, and communicate findings across technical and non-technical audiences.

Requirements

  • 4–8 years of hands-on enterprise security engineering experience focused on endpoints and identity.
  • Hands-on experience with EDR, XDR, SIEM, CNAPP, CSPM, CWP, and applicable security technologies across OSI layers.
  • Experience in threat hunting, digital forensics, and/or detection engineering, including automation scripts and security enforcement or observability rules.
  • Knowledge of common security benchmarks and frameworks, including MITRE and NIST.
  • Expertise in at least one of Python, Bash, or PowerShell applied to containerized services, CLI commands, and/or security use cases.
  • Experience owning complex security initiatives end-to-end, including cross-functional coordination, stakeholder communication, and delivery of technical outcomes.
  • Ability to communicate technical findings clearly to engineering peers and non-technical stakeholders.
  • Relevant certification such as SSCP, Security+, or equivalent.
  • Prior experience mentoring or providing technical guidance to junior engineers.

Nice to have

  • Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
  • Experience with AI-enabled SecOps, including UEBA, ML-based alert prioritization, or AI-assisted threat-hunting workflows.
  • Working knowledge of AWS, Azure, or GCP.
  • Experience contributing endpoint or network security controls to CI/CD pipelines and infrastructure-as-code environments.
  • Experience supporting SOC 2, ISO 27001, or HIPAA compliance and audit requirements from a technical-control perspective.

Culture & Benefits

  • Hybrid/remote work arrangement for the Illinois-based role.
  • Compensation includes base salary, annual performance bonus, and long-term incentives.
  • Work within a layered defense-in-depth security program focused on automation, adaptability, and measurable detection and response improvement.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →