Principal Threat Analyst (Cybersecurity)

Location: Fully remote, available anywhere in the continental United States. The role supports a 24/7/365 operation, requires rotating day, mid, and night shifts, and includes approximately 10% travel to meet client needs.

Company

hirify.global provides managed cybersecurity services and security operations expertise to government and enterprise clients through its Advanced Fusion Center.

What you will do

• Perform advanced security monitoring, incident response, proactive threat hunting, and moderate-to-complex investigations across endpoint, UEBA, public cloud, SaaS, network, and packet data.
• Develop repeatable methods, detection use cases, and recommendations for tuning security platforms and improving detection and response capabilities.
• Analyze attack methodologies, malware, malicious toolkits, adversary emulation concepts, and MITRE ATT&CK tactics.
• Document investigations and operational procedures, prioritize high-priority customer tasks, and recommend incident remediation and compensating controls.
• Review investigations completed by junior analysts, mentor team members, present technical topics, and collaborate with engineers, architects, and other security teams.
• Assess defensive and detective controls, insider-threat and fraud risks, and opportunities to reduce client attack surfaces.

Requirements

• 7–10 years of related work experience, including 6+ years of operational experience assessing, reviewing, and remediating infrastructure vulnerabilities, CVEs, and risks.
• Advanced knowledge of the cyber threat landscape, adversary tactics and techniques, incident response terminology and processes, and security controls and telemetry used to detect threats.
• Experience with CVE and CVSS scoring, third-party software vulnerabilities, compensating controls, mitigating factors, information security frameworks, and standard methodologies.
• Knowledge of Windows and/or Linux, network and server technologies, cybersecurity controls, and logging and monitoring tools.
• Experience with endpoint investigations and alert triage using EDR, phishing analysis, malware analysis without reverse engineering, proactive threat hunting, and threat intelligence.
• Experience conducting multi-tool investigations across endpoints, UEBA, public cloud, SaaS, and packet data; designing security use cases; and performing common threat-response playbook actions such as host quarantine.
• Knowledge of AWS, Azure, and GCP cloud technologies, basic fraud and insider-threat investigations, Tableau or comparable data-visualization tools, and demonstrable data-analytics skills.
• Extensive MITRE ATT&CK expertise, including associated tactics and common attacker techniques.
• Strong analytical, problem-solving, verbal, and written communication skills; ability to prioritize multiple projects and interact effectively with all levels of personnel.
• Flexibility for support operations, ability to work independently in a geographically dispersed team, and willingness to travel approximately 10%.

Culture & Benefits

• Fully remote work with the technology needed to work productively from home.
• 24/7/365 security operations with rotating shifts across days, mids, and nights.
• Work/life balance, professional training resources, and opportunities to solve complex client problems.
• Inclusive employee resource groups and volunteer opportunities through hirify.global Chips In.