Назад
Company hidden
4 дня назад

Senior Security Analyst III (Cybersecurity)

102 400 - 153 600$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Analyst III (Cybersecurity): Monitoring security alerts, triaging incidents, managing vulnerabilities, and improving security operations for a digital finance platform with an accent on cloud security, SIEM/EDR visibility, and control effectiveness. Focus on investigating suspicious activity, developing detection and response playbooks, automating workflows, and assessing exposure-based security risks.

Location: Remote, United States; other location: Chicago, Illinois, United States

Salary: $102,400–$153,600 USD annually, plus potential performance-based bonuses and equity grants

Company

hirify.global is a technology-enabled digital finance platform that works with banks to provide financial products and services supporting financial inclusion and consumer financial health.

What you will do

  • Monitor SIEM, EDR, and cloud-log alerts; gather initial incident data, triage potential incidents, and escalate to senior engineers.
  • Execute initial incident response activities, including investigation, containment, documentation, and incident tracking for audit and compliance.
  • Assist with SIEM alert configuration and tuning, log review, security-tool deployment, and development of basic threat-detection logic.
  • Track vulnerabilities using exposure- and exploitability-based risk assessment rather than standard CVSS tracking.
  • Identify IT control risks and opportunities and recommend sustainable root-cause improvements.
  • Maintain security playbooks and documentation, help automate manual workflows, and build dashboards and metrics for leadership visibility.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, or equivalent experience.
  • 3–5 years of professional Information Security experience, with expertise in at least one of Security Operations, Incident Response, or Vulnerability Management.
  • Experience with security and control frameworks including FFIEC, NIST, COBIT, ITIL, and ISO control frameworks.
  • Experience with EDR platforms such as CrowdStrike, Defender for Endpoint, or SentinelOne; SIEM/SOAR tools such as Sumo Logic, Splunk, Chronicle, Azure Sentinel, or Google SecOps; CSPM tools such as Wiz, Prisma, or Orca; and vulnerability-management platforms such as Qualys, Tenable, or Rapid7.
  • Experience with next-generation firewall tools such as Cisco FMC, Palo Alto Panorama, or FortiGate.
  • Knowledge of information-security standards, applicable laws and regulations, common attack techniques including MITRE ATT&CK, incident triage, and remediation workflows.
  • Foundational knowledge of AWS or other cloud environments, plus strong understanding of networking, Linux and Windows operating systems, least privilege, and defense in depth.
  • Hands-on experience or familiarity with API integrations, scripting, or SOAR platforms such as Cortex, Google SecOps, or Splunk SOAR for automation.
  • Strong written and verbal communication, analytical and problem-solving skills, attention to detail, and ability to develop procedures and playbooks.

Nice to have

  • CompTIA CySA+, GCIH, GCIA, GMON, GCDA, GSOC, or CISSP Associate certification.
  • Firewall management experience.
  • Experience in a regulated industry, particularly financial services or health care.

Culture & Benefits

  • Flexible remote work environment.
  • 401(k) matching, generous paid time off, and medical, dental, and vision coverage.
  • Tuition reimbursement, LinkedIn Learning access, and lifestyle benefits through Fringe.
  • Additional benefits include DoorDash DashPass, Figo pet insurance, and Rocket Lawyer.
  • Equal opportunity workplace with reasonable accommodation available for qualified candidates with disabilities.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →