Назад
Company hidden
5 дней назад

Senior Security Engineer (EUBA & NHIBA)

130 000 - 195 000$
Формат работы
remote (только USA)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer (EUBA & NHIBA): Building behavioral analytics, identity detections, threat hunts, and automated response capabilities across human and non-human identities with an accent on telemetry integration, risk modeling, and AI-enabled security operations. Focus on detecting credential misuse, privilege abuse, anomalous workload behavior, and identity-based attacks while leading complex initiatives and mentoring security engineers.

Location: Illinois, United States of America; hybrid/remote workplace.

Salary: $130,000–$195,000 annually, plus annual performance bonus and long-term incentives.

Company

hirify.global develops software and operates an enterprise security program focused on protecting its technical ecosystem.

What you will do

  • Design, deploy, integrate, and optimize Entity and User Behavior Analytics (EUBA) and Non-Human Identity Behavior Analytics (NHIBA).
  • Aggregate identity, endpoint, application, cloud, API, privileged-access, secrets, and workload telemetry to establish behavioral baselines and risk-based detections.
  • Develop threat hunts and cross-domain detections for credential misuse, privilege abuse, lateral movement, anomalous access, and automated workload activity.
  • Integrate behavioral findings with SIEM, XDR, SOAR, identity threat detection, and case-management workflows.
  • Automate enrichment, triage, risk scoring, investigation, containment, credential rotation, access restriction, and escalation.
  • Lead technical initiatives, mentor junior and mid-level engineers, document architecture and runbooks, and represent security engineering in cross-functional discussions.

Requirements

  • 4–8 years of hands-on experience in security engineering, detection engineering, identity security, threat hunting, security analytics, or a related discipline.
  • Experience developing behavioral analytics, anomaly detections, correlation logic, threat-hunting queries, or risk-scoring methods from security telemetry.
  • Experience analyzing workforce, privileged, service, machine, application, API, or cloud workload identities.
  • Hands-on experience with SIEM, XDR, UEBA/EUBA, identity threat detection and response, SOAR, or comparable security analytics platforms.
  • Strong understanding of authentication, authorization, privilege, credentials, tokens, secrets, service accounts, workload identities, and identity-based attack techniques.
  • Experience integrating telemetry from identity providers, endpoints, cloud platforms, applications, privileged-access systems, and other enterprise security technologies.
  • Proficiency in at least one query, scripting, or programming language such as KQL, SPL, SQL, Python, PowerShell, or equivalent.
  • Experience measuring and tuning detection efficacy, including false-positive reduction, coverage analysis, validation, and operationalization.
  • Experience leading complex security initiatives through design, implementation, testing, stakeholder coordination, and operational adoption.
  • Ability to communicate analytical findings, behavioral risk, and technical recommendations to technical and non-technical stakeholders.
  • Relevant security certifications such as CySA+, SSCP, Security+, or equivalent, plus experience mentoring or guiding junior engineers.

Nice to have

  • Bachelor’s degree in Computer Science, Information Security, Data Science, Engineering, or a related discipline, or equivalent practical experience.
  • Experience with UEBA, EUBA, identity threat detection and response, non-human identity management, or identity security posture management.
  • Experience with statistical analysis, machine learning, graph analytics, peer-group analysis, entity resolution, or AI-assisted security analytics.
  • Experience detecting threats involving service accounts, machine and workload identities, OAuth applications, API keys, certificates, tokens, secrets, or autonomous agents.
  • Working knowledge of AWS, Azure, or Google Cloud identity and workload services.
  • Experience with identity providers, privileged-access management, secrets management, cloud identity, CI/CD, containers, and workload orchestration.
  • Familiarity with MITRE ATT&CK, identity-focused threat frameworks, behavioral detection methodologies, and detection-as-code.
  • Experience supporting governance, privacy, compliance, or audit requirements for identity and behavioral telemetry.

Culture & Benefits

  • Hybrid/remote work arrangement.
  • Competitive, fair, and equitable compensation practices.
  • Annual performance bonus and long-term incentives are included in total compensation.
  • Compensation is determined by experience, skills, qualifications, and internal pay equity.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →