Cybersecurity Analyst

Location: Remote - USA; candidates must be able to verify their legal right to work in the U.S. without company sponsorship.

Salary: $90,000-$120,000 per year

Company

hirify.global provides consulting, economics, disputes and investigations, corporate finance, performance improvement, data science, and emerging technology services.

What you will do

• Monitor, triage, investigate, document, and coordinate responses to security alerts, incidents, tickets, and suspicious activity across Microsoft and third-party platforms.
• Administer Microsoft security capabilities across Azure, Microsoft Entra ID, Active Directory, Defender, Defender for Cloud, Sentinel, and Purview within approved change-control boundaries.
• Review Azure security recommendations, policies, configurations, security baselines, control exceptions, and remediation evidence.
• Support identity security, email security, cloud security posture management, Netskope policies, vulnerability management, and security-awareness workflows.
• Assess generative AI and AI-enabled service risks, including application inventory, usage monitoring, access controls, policy testing, and governance reviews.
• Maintain procedures, configuration records, metrics, dashboards, audit evidence, and change documentation; participate in risk assessments, tabletop exercises, incident response, and on-call or escalation rotation.

Requirements

• 3+ years of experience in cybersecurity operations, cloud security, identity security, security engineering, or a closely related role.
• Working knowledge of Microsoft Azure security, Microsoft Entra ID, Active Directory, Azure Policy, Conditional Access, PIM, Defender, Defender for Cloud, Sentinel, and Purview.
• Experience applying Microsoft security baselines and CIS Benchmarks, including testing, exception documentation, and remediation tracking.
• Hands-on familiarity with email security and phishing-response workflows; Proofpoint experience is strongly preferred.
• Experience with cloud security posture management or CNAPP capabilities and secure web gateway, CASB, or SaaS application-control platforms.
• General knowledge of AI security risks, identity and authentication concepts, MFA, passwordless authentication, OAuth, SAML, Kerberos, privileged access, and least privilege.
• Ability to analyze alerts and logs, distinguish expected administration from suspicious activity, develop defensible timelines, and document conclusions and follow-up actions.
• Experience working with a SOC, MDR provider, or outsourced monitoring partner; familiarity with Windows, macOS, cloud platforms, enterprise SaaS, and hybrid identity environments.
• Knowledge of security and compliance frameworks such as NIST CSF, CIS Controls, SOC 2, ISO 27001/27002, HIPAA, or HITRUST, plus strong written and verbal communication skills.
• Ability to manage multiple investigations and workstreams while maintaining accurate records and following change-management requirements.

Nice to have

• Experience supporting security operations in a Microsoft-centric enterprise environment.
• Experience creating KQL queries, workbooks, metrics, or dashboards for security monitoring and reporting.
• Experience testing security controls in pilot groups and documenting impact, exceptions, and rollback considerations.
• Security certifications such as Microsoft SC-200, CompTIA Security+, CompTIA CySA+, GIAC certifications, or comparable credentials; equivalent hands-on experience is also considered.

Culture & Benefits

• Work closely with IT leadership, Infrastructure, Network, Service Desk, Risk and Compliance, and external security partners.
• Support a Zero Trust security approach across cloud and on-premises environments.
• Participate in cross-training, risk assessments, tabletop exercises, incident-response activities, and an on-call or escalation rotation as required.
• Employment is full time and remote within the USA.