Internal Security & Security Operations Engineer (Cybersecurity)

Location: Remote

Company

hirify.global operates a large-scale web hosting and distributed technology environment.

What you will do

• Design and maintain RBAC, MFA, SSO, PAM, password vaults, API keys, SSH keys, recovery codes, and secrets management.
• Own onboarding, role-change, temporary-access, contractor-access, offboarding, access-review, and audit-evidence processes.
• Monitor and investigate alerts across SIEM, EDR, IDS/IPS, authentication systems, cloud/SaaS platforms, applications, and endpoints.
• Investigate compromised accounts, malware, credential leaks, suspicious logins, privilege abuse, insider risk, and unauthorized access; collect evidence, contain threats, and coordinate recovery.
• Maintain detection rules, alert quality, incident records, escalation paths, and response playbooks, leading internal security incidents through closure.
• Define security requirements for laptops, VPN and remote access, email, code repositories, support platforms, finance tools, and administrative systems while collaborating with HR, IT, DevOps, Network, Product, Engineering, Support, Abuse, Finance, Legal, and executive management.

Requirements

• 5+ years of hands-on experience in internal security, IAM, SOC/security operations, incident response, IT security, or a closely related role.
• Practical experience with RBAC, MFA, SSO, PAM, identity providers, password management, account lifecycle management, and access auditing.
• Hands-on experience with SIEM, EDR, IDS/IPS, centralized logging, authentication logs, alert triage, and case management.
• Experience investigating compromised accounts, malware, credential leaks, suspicious authentication activity, insider risk, and unauthorized access.
• Strong understanding of Linux access, SSH, VPN, endpoints, cloud/SaaS administration, email security, and remote-workforce security.
• Strong organizational skills and the ability to enforce security controls while collaborating with HR, IT, managers, and system owners.
• Hands-on access-control administration, security-tool operation, log investigation, and incident response are required; policy/compliance-only profiles are not suitable.

Nice to have

• Experience in web hosting, cloud infrastructure, data centers, SaaS, fintech, MSSP, or another distributed technology environment.
• Security+, CySA+, GCIH, SC-200, IAM/PAM vendor certifications, CISSP, or equivalent practical expertise.

Culture & Benefits

• Remote work in a hands-on internal security role.
• Close collaboration with a second cybersecurity specialist and cross-functional technical and business teams.
• Focus on improving MFA and privileged-access coverage, access-removal speed, access-review coverage, alert response, incident resolution, and internal security playbooks.
• Ownership of preventive controls, monitoring, investigations, and measurable security improvements.