Security Operations Analyst (AI)

Location: Hybrid in Denver, CO; New York, NY; or San Francisco, CA. Employees based in these locations are expected to work from the office approximately 2–3 days per week or more depending on the role. Business-hours security operations with a lightweight rotation for rare after-hours critical-incident escalations.

Salary: $147,000–$164,000 in Denver; $178,000–$199,000 in New York and the San Francisco Bay Area. Stock equity is additional.

Company

hirify.global provides payroll, health insurance, 401(k), and HR products for more than 500,000 small businesses.

What you will do

• Own medium-sized security operations initiatives from problem definition through design, rollout, measurement, and stakeholder communication.
• Lead and participate in incident response across cloud and corporate environments, including investigation, root-cause analysis, post-mortems, and remediation follow-through.
• Monitor and improve detections using AWS GuardDuty, Security Hub, WAF, GCP Security Command Center, and CSPM tooling; reduce alert noise and improve configurations.
• Build, test, document, and maintain Python automation, SOAR playbooks, and threat-hunting workflows.
• Govern non-human identities, service accounts, cloud secrets, DLP coverage, and MCP/AI-agent connections; shift MCP reviews toward proactive, risk-based governance.
• Use AI-assisted security tooling, collaborate with technical and non-technical teams, mentor teammates, interview candidates, and participate in the on-call rotation.

Requirements

• 5+ years of experience in security operations, incident response, SOC analysis, or a closely related field.
• Experience owning security projects or initiatives and coordinating with other teams.
• Hands-on incident response experience, including investigation, root-cause analysis, and post-incident follow-through.
• Working knowledge of security monitoring, incident response, vulnerability management, and cloud security fundamentals across AWS, GCP, or similar providers.
• Comfort working in Linux environments and proficiency in Python for scripting and automation.
• Hands-on experience with enterprise SIEM, EDR, SOAR, and DLP tools; building these tools from scratch is not expected.
• Strong analytical, problem-solving, communication, and escalation skills.
• Comfort using AI-assisted tools such as Claude Code, Claude Skills, and MCP-connected tools, with knowledge of prompt injection, data exfiltration, over-permissioned agents, and mitigations.
• Familiarity with service accounts, API keys/tokens, OAuth, and identity and access risks involving AI agents and MCP-connected tools.
• Willingness and ability to participate in a lightweight, business-hours-oriented on-call rotation.

Nice to have

• Log analysis or digital forensics experience in cloud or on-premise environments.
• Incident response involving multiple stakeholders; experience writing or improving detections and playbooks.
• Familiarity with vulnerability classes, remediation approaches, CI/CD security, dependency scanning, NIST, or SOC 2.
• Experience with identity and access management, non-human identity, secrets management, or MCP/agent architecture.
• Mentoring or onboarding experience.
• Security certifications such as Security+ or GSEC. Advanced certifications such as CISSP or CISM are not expected at this level.

Culture & Benefits

• Full-time employees receive competitive base pay, benefits, and equity in the form of RSUs.
• AI is a fundamental part of work, with expectations to use relevant AI tools and develop AI fluency.
• Security operations covers Eastern and Pacific time zones during business hours, with an on-call rotation currently about one week per month and expected to shift to approximately every 5–6 weeks as the team grows.
• Hybrid employees must maintain a secure, reliable, and consistent internet connection and regular, predictable attendance.
• hirify.global provides equal employment opportunity, reasonable accommodations, and consideration of qualified applicants with criminal histories as permitted by law.