Snr Cybersecurity Consultant Engineer (Architecture, Infrastructure and Remediation)

Location: United States. Candidates must be legally authorized to work in the United States. Flexible work is supported, with in-person collaboration for key moments based on role, team, and business needs.

Salary: USD 120,000–160,000 annually.

Company

hirify.global is a managed cybersecurity services provider focused on threat detection, response, security advisory, offensive security, and incident response.

What you will do

• Deliver client engagements across SIEM engineering, Microsoft security advisory, implementation, and security operations optimization.
• Design and build Microsoft Sentinel solutions, including data-source onboarding, ingestion, parsing, normalization, connectors, analytics rules, hunting queries, automation rules, playbooks, workbooks, and use-case documentation.
• Develop custom detection content, tune queries, reduce false positives, and operationalize use cases based on client threat profiles and available telemetry.
• Integrate and operationalize Microsoft Defender XDR, and advise on or configure Microsoft Purview, Entra ID, Defender for Cloud, Azure security, and Copilot.
• Facilitate workshops, capture requirements and decisions, and provide SME-level guidance to technical and non-technical stakeholders.
• Produce design and implementation artifacts, maturity roadmaps, gap analyses, executive summaries, effort estimates, technical scopes, and pre-sales solution proposals.

Requirements

• Senior consulting or professional-services delivery experience, including ownership of client workshops, business requirements, use-case discovery, engagement scope, and signed-off deliverables; an internal SOC or engineering role alone is not sufficient.
• Hands-on production experience with Microsoft Sentinel engineering, including analytic rule design and build, query tuning and optimization, false-positive reduction, and use-case operationalization.
• Experience producing detection design records (AIR DDRs) covering use-case scenarios, data sources, KQL, and tuning notes.
• Hands-on Microsoft Defender XDR experience in a detection or SOC-integration context, including Defender for Endpoint plus at least one of Identity, Office, or Cloud Apps.
• Hands-on Microsoft Purview configuration in a security or compliance context connected to monitoring or control design.

Nice to have

• Firewall or network security configuration reviews, including policy quality, SIEM logging, and segmentation relevant to detections.
• Active Directory security reviews covering privileged access, delegation, hardening, and hybrid identity.
• Azure security reviews beyond Defender for Cloud and Sentinel, including landing-zone and control-plane hygiene.
• AWS security reviews, multi-cloud posture work, or broader control reviews supporting security operations and threat detection roadmaps.
• Working knowledge of Splunk or SentinelOne.
• Certifications such as SC-200, SC-500/AZ-500, SC-100, SC-300, SC-400, Splunk ES Admin or Architect, GIAC detection or incident response certifications, or CISSP.

Culture & Benefits

• Flexible work arrangements with in-person collaboration for key moments according to role, team, and business needs.
• Client-facing work across security strategy, architecture, hands-on delivery, operations uplift, and incident response.
• Work with practitioners experienced in building and operating security programs.
• Inclusive workplace committed to respect, equal opportunity, and consideration of qualified applicants.