Associate Director, IT Security | Incident Response (Cybersecurity)

Location: Remote; primary location USA - Waltham, MA, United States of America. Occasional domestic or international travel up to 25%; applicants may be required to appear onsite at a hirify.global office during the recruitment process.

Compensation: $160,100.00–$286,000.00 USD, plus eligibility for a bonus.

Company

hirify.global is hiring for its Global Information Security team.

What you will do

• Define and execute the enterprise cybersecurity incident response strategy, roadmap, operating model, escalation paths, and 24x7 coverage.
• Lead the full incident lifecycle, including detection, triage, investigation, containment, eradication, recovery, post-incident reviews, root cause analysis, and corrective actions.
• Act as executive incident commander and escalation point for major incidents, communicating business impact, risk, findings, and recommended actions.
• Build and develop a high-performing incident response, detection, and Blue Team capability.
• Develop incident response plans, playbooks, runbooks, dashboards, metrics, simulations, tabletop exercises, and operational documentation.
• Optimize SIEM, SOAR, EDR/XDR, NDR, threat intelligence, digital forensics, logging, automation, AI, and advanced analytics across cloud, SaaS, identity, network, application, and infrastructure environments.

Requirements

• Bachelor’s degree in Computer Science, Management Information Systems, a related discipline, or equivalent professional experience.
• 10+ years of experience in IT, cybersecurity, security operations, IT service management, or related areas, including 5+ years in information security, cybersecurity incident response, incident management, security risk management, or related functions.
• Experience leading complex cybersecurity investigations and incident response activities in a 24x7x365 security operations environment.
• Experience engaging senior and executive leadership during incidents and translating technical issues for technical and non-technical audiences.
• Experience with threat intelligence, SIEM, SOAR, EDR/XDR, digital forensics, and forensic investigation across cloud and endpoint environments; examples include Microsoft Sentinel, CrowdStrike, ThreatConnect, Recorded Future, and Swimlane.
• Knowledge of vulnerabilities, threat vectors, malicious code, network and host security, identity, and access controls, together with risk analysis and management experience.
• Working knowledge of NIST CSF, NIST 800-53, ISO 27001, PCI DSS, GDPR, and ITIL service management methodology.
• Ability to develop, execute, and assess incident response exercises, including tabletop and Red Team/Blue Team activities.
• Strong analytical, investigative, problem-solving, decision-making, communication, discretion, integrity, prioritization, and high-pressure incident leadership skills; flexibility to support significant incidents outside standard business hours.

Nice to have

• Professional certifications such as CISSP, GCIH, GCFA, GCFE, GCTI, ITIL, or other relevant cybersecurity certifications.
• Advanced programming or scripting knowledge.
• Experience assessing external service providers and third-party security posture.
• Experience with security automation, AI-enabled security operations, and advanced analytics.
• Multilingual capabilities.

Culture & Benefits

• Remote role supporting a global organization with occasional domestic or international travel up to 25%.
• Medical, dental, and vision plans; 401(k); FSA/HSA; commuter benefits; tuition assistance; vacation and sick time; and paid parental leave.
• Applicants may be required to attend in-person interviews and appear onsite at a hirify.global office during the hiring process.
• Use of AI-generated responses, external prompts, or third-party support during interviews may result in disqualification.