Senior Technical Consultant - Network SecOps

Location: United States; remote

Salary: USD 180,000–210,000 per year in on-target earnings, including base salary and any applicable target bonus.

Company

hirify.global builds platforms for digital business using cloud infrastructure, automation, analytics, and software delivery to support enterprise digital transformation.

What you will do

• Design and deploy SIEM architectures across on-premises, virtual, and cloud environments, including AWS, Azure, and GCP telemetry.
• Configure log ingestion pipelines, storage tiers, retention, query performance, and sizing for high-volume environments.
• Create custom correlation rules, detections, dashboards, and SOAR playbooks for client SOC workflows and executive reporting.
• Build and maintain REST API integrations with EDR, firewall, ticketing, and CMDB platforms, including automation scripts and data enrichment.
• Assess client monitoring coverage, identify detection gaps and alert fatigue, and optimize deployments.
• Troubleshoot complex SIEM/SOAR issues, document solution designs and as-built configurations, and mentor junior consultants.

Requirements

• 8+ years of hands-on production experience with a major SIEM platform such as Cortex XSIAM, CrowdStrike Next-Gen SIEM, Google SecOps, Splunk, Microsoft Sentinel, IBM QRadar, or Elastic Security.
• Experience deploying and administering at least one SOAR platform, including Cortex XSOAR, Google SecOps SOAR, CrowdStrike Falcon Fusion, Splunk SOAR, Microsoft Sentinel Automation, Swimlane, or Tines.
• Experience deploying and tuning log ingestion pipelines, indexers, and storage tiers, including sizing, retention, and performance troubleshooting.
• Strong understanding of network, endpoint, identity, and cloud audit telemetry, plus network security, cloud environments, Identity, Linux, Mac, and Windows.
• Experience building custom correlation rules, detections, and dashboards beyond default configurations.
• Proficiency in Python and PowerShell for automation, customization, and playbook development.
• Working knowledge of XQL, LogScale/CQL, YARA-L, SPL, KQL, or equivalent query languages, with experience integrating diverse data sources into a SIEM.
• Experience with proactive threat hunting and incident investigations using MITRE ATT&CK, Cyber Kill Chain, NIST CSF, and CIS Critical Security Controls.
• Strong analytical, troubleshooting, communication, and client-engagement skills.

Nice to have

• Experience with AWS CloudTrail, Azure Monitor, and GCP Audit Logs.
• Relevant certifications such as CEH, PenTest+, Security+, CISSP, or Microsoft SC-200, or equivalent industry certifications.

Culture & Benefits

• Culture focused on belonging, diversity, representation, and inclusion.
• Medical, dental, and vision insurance for USA employees.
• 401(k), paid company holidays, paid time off, and paid parental and caregiver leave.
• Office technology lab, cross-department training, and sponsored certifications and credentials.
• AI tools may support parts of hiring; candidates may opt out without penalty.