Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$130к-195к/год
$160к$190кмедиана$220к
По похожим ролям (48) ~ $190к/год
На СНГ рынке: $6.7к/мес ($5.1к - $12к)
86
Хорошая вакансия
развернуть
Роль чётко сосредоточена на аналитике поведения идентичностей и инженерии детектирования, с ответственностью за инициативы и наставничеством; объём задач большой, но логичный.
?Широкий охват
Понятная роль
Новая специализация
Продуктовая компания
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Security Engineer (EUBA & NHIBA): Building behavioral analytics, identity detections, threat hunts, and automated response capabilities across human and non-human identities with an accent on telemetry integration, risk modeling, and AI-enabled security operations. Focus on detecting credential misuse, privilege abuse, anomalous workload behavior, and identity-based attacks while leading complex initiatives and mentoring security engineers.
Location: Illinois, United States of America; hybrid/remote workplace.
Salary: $130,000–$195,000 annually, plus annual performance bonus and long-term incentives.
Company
hirify.global develops software and operates an enterprise security program focused on protecting its technical ecosystem.
What you will do
Design, deploy, integrate, and optimize Entity and User Behavior Analytics (EUBA) and Non-Human Identity Behavior Analytics (NHIBA).
Aggregate identity, endpoint, application, cloud, API, privileged-access, secrets, and workload telemetry to establish behavioral baselines and risk-based detections.
Develop threat hunts and cross-domain detections for credential misuse, privilege abuse, lateral movement, anomalous access, and automated workload activity.
Integrate behavioral findings with SIEM, XDR, SOAR, identity threat detection, and case-management workflows.
Lead technical initiatives, mentor junior and mid-level engineers, document architecture and runbooks, and represent security engineering in cross-functional discussions.
Requirements
4–8 years of hands-on experience in security engineering, detection engineering, identity security, threat hunting, security analytics, or a related discipline.
Experience developing behavioral analytics, anomaly detections, correlation logic, threat-hunting queries, or risk-scoring methods from security telemetry.
Hands-on experience with SIEM, XDR, UEBA/EUBA, identity threat detection and response, SOAR, or comparable security analytics platforms.
Strong understanding of authentication, authorization, privilege, credentials, tokens, secrets, service accounts, workload identities, and identity-based attack techniques.
Experience integrating telemetry from identity providers, endpoints, cloud platforms, applications, privileged-access systems, and other enterprise security technologies.
Proficiency in at least one query, scripting, or programming language such as KQL, SPL, SQL, Python, PowerShell, or equivalent.
Experience measuring and tuning detection efficacy, including false-positive reduction, coverage analysis, validation, and operationalization.
Experience leading complex security initiatives through design, implementation, testing, stakeholder coordination, and operational adoption.
Ability to communicate analytical findings, behavioral risk, and technical recommendations to technical and non-technical stakeholders.
Relevant security certifications such as CySA+, SSCP, Security+, or equivalent, plus experience mentoring or guiding junior engineers.
Nice to have
Bachelor’s degree in Computer Science, Information Security, Data Science, Engineering, or a related discipline, or equivalent practical experience.
Experience with UEBA, EUBA, identity threat detection and response, non-human identity management, or identity security posture management.
Experience with statistical analysis, machine learning, graph analytics, peer-group analysis, entity resolution, or AI-assisted security analytics.
Experience detecting threats involving service accounts, machine and workload identities, OAuth applications, API keys, certificates, tokens, secrets, or autonomous agents.
Working knowledge of AWS, Azure, or Google Cloud identity and workload services.
Experience with identity providers, privileged-access management, secrets management, cloud identity, CI/CD, containers, and workload orchestration.
Familiarity with MITRE ATT&CK, identity-focused threat frameworks, behavioral detection methodologies, and detection-as-code.
Experience supporting governance, privacy, compliance, or audit requirements for identity and behavioral telemetry.
Culture & Benefits
Hybrid/remote work arrangement.
Competitive, fair, and equitable compensation practices.
Annual performance bonus and long-term incentives are included in total compensation.
Compensation is determined by experience, skills, qualifications, and internal pay equity.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →