Sr Specialist – Cybersecurity Operations; Detection and Response

Location: Rahway, New Jersey, United States. This is a remote position, with remote work approval considered for the right candidate.

Company

hirify.global is a large organization offering cybersecurity operations and detection-and-response opportunities.

What you will do

• Design, develop, and optimize advanced detection use cases, correlation rules, and detection models across SIEM, EDR, XDR, and cloud security platforms.
• Investigate critical incidents, coordinate containment with response teams and IT stakeholders, document lessons learned, and support control implementation.
• Automate triage, enrichment, and response workflows with SOAR platforms to improve incident response efficiency and reduce analyst fatigue.
• Conduct forensic analysis and validate root causes using Microsoft Defender for Endpoint, CrowdStrike, Sysinternals, endpoint data, and large-scale log correlation.
• Evaluate emerging threats, improve detection and response processes, and provide situational awareness and actionable recommendations to stakeholders and leadership.
• Coach and mentor junior analysts while helping mature the organization’s incident response and threat detection capabilities.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 5+ years of experience in incident response operations, intrusion detection, threat hunting, or incident response.
• Experience developing detection rules, playbooks, and automation workflows, with demonstrated experience leading complex investigations and coordinating cross-functional response efforts.
• Expert understanding of attack lifecycles, network telemetry, endpoint data, adversarial tactics mapped to MITRE ATT&CK, and the full incident lifecycle from identification through post-incident recovery.
• Experience with SIEM platforms such as Microsoft Sentinel and Google SecOps, as well as SIEM/SOAR technologies for event correlation, orchestration, and response automation.
• Familiarity with EDR tools including Microsoft Defender for Endpoint, CrowdStrike, and Sysinternals.
• Understanding of the NIST Incident Response Framework, MITRE ATT&CK, and ISO 27001.
• Experience with Python and PowerShell, Windows Active Directory environments, cloud computing architectures, forensic analysis, log correlation, and root cause investigations.
• Strong communication skills for conveying findings to technical and non-technical audiences, plus the ability to collaborate across teams and uphold cybersecurity and data privacy standards.

Nice to have

• Advanced certifications such as GIAC GCIH or GCFA.
• 5+ years of experience in detection engineering roles for large organizations.
• Hands-on experience with cloud-native security tooling and hybrid SOC environments.

Culture & Benefits

• Remote work is available for this position, subject to approval for the right candidate.
• Collaborative work across internal stakeholders, leadership, response teams, IT, and external partners.
• Emphasis on ethical conduct, transparency, accountability, curiosity, adaptability, innovation, learning, and continuous improvement.