Principal Security Operations Center Analyst (Cybersecurity)

Location: Remote Australia

Salary: $180,000–$215,000 AUD base annually, plus bonus and equity.

Company

hirify.global is a remote-first cybersecurity company founded by former NSA cyber operators that builds in-house technology supported by a 24/7 human-led Security Operations Center.

What you will do

• Own complex, multi-host intrusions from triage through forensic timelining, root-cause analysis, and remediation across endpoint, identity, and SIEM telemetry.
• Partner with Product, Product Research, Detection Engineering, and Threat Hunting to convert recurring SOC issues into detection, suppression, and product improvements.
• Perform advanced static and dynamic malware analysis, research emerging attacker tradecraft, and publish findings through blogs, webinars, and conference talks.
• Design and maintain automation and human-led agentic workflows with Workflow Engine owners, Product, and Engineering, including inline QC/QA.
• Own SOC quality by reviewing AI-agent and analyst output, fixing root causes, and serving as the final technical reviewer for detection tuning, suppression decisions, and high-impact reports.
• Provide technical leadership and mentoring, establish investigation standards, conduct case reviews and knowledge sessions, support hiring, and handle escalations for technical and non-technical audiences.

Requirements

• 6+ years in SOC, Incident Response, DFIR, or MDR roles, including leadership of multi-host intrusion investigations.
• Deep knowledge of attacker tradecraft and detection across MITRE ATT&CK, including credential access, lateral movement, persistence, defense evasion, and living-off-the-land techniques.
• Deep forensic and investigation experience across Windows, macOS, and Linux.
• Strong cloud identity investigation and remediation experience with Microsoft 365, Entra ID, and Google Workspace.
• Advanced static and dynamic malware analysis, including IOC extraction and determination of malware capability and intent.
• Strong enterprise Windows administration covering Active Directory, Group Policy, PowerShell, and domain trusts, plus core networking knowledge.
• Hands-on daily use of AI tools such as Claude and Codex for analysis, research, automation, and agentic workflows using Python, PowerShell, or similar, with sound output-validation judgment.
• Understanding of inline quality delivery, including quality gates, statistical sampling, drift detection, and regression testing.
• Proven technical leadership and mentoring, with the ability to explain complex findings clearly in writing and verbally.

Nice to have

• Published research, blogs, conference talks, or open-source security tooling.
• Detection engineering experience, including writing and tuning detections and SIEM queries.
• Investigation experience with Azure, AWS, or GCP.
• Previous MSP, MSSP, or MDR experience and familiarity with RMM tools.

Culture & Benefits

• Fully remote work with Monday-to-Friday scheduling and at least one annual US trip for the Summer Summit, plus local Australian events.
• $800 AUD reimbursement for a new-starter home office setup.
• 12 weeks of paid parental leave for primary and secondary carers.
• $185 AUD monthly digital allowance and a $40 AUD monthly home-office technology stipend.
• Subsidised private health insurance, stock options for all full-time employees, and access to BetterUp coaching and professional growth.
• Inclusive, low-ego, share-everything culture centered on technical quality, collaboration, and meaningful customer impact.

Hiring process

• AI tools may assist with resume screening, skills assessment, and candidate matching, while final decisions remain with human recruiters.
• Accommodation requests for the application, interview, testing, or selection process should be sent to accommodations@hirify.globallabs.com.