Security Incident Response Engineer (Cybersecurity)

Location: Hybrid, 999 Peachtree Street Northeast, Suite 2750, Atlanta, Georgia, United States. Comfort with an on-site presence is required to support collaboration, team leadership, and cross-functional partnership.

Company

hirify.global is a global fintech company providing insurance, reinsurance, payroll, benefits, cybersecurity, mortgage, and related solutions, with more than 19,000 colleagues in over 20 countries.

What you will do

• Investigate and respond to incidents affecting endpoints, identities, cloud platforms, email, applications, data, and network infrastructure.
• Perform triage, severity classification, impact analysis, containment, eradication, recovery, escalation, and major incident management.
• Analyze security alerts, validate suspicious activity, conduct root-cause analysis, and perform proactive threat hunting using MITRE ATT&CK.
• Collect and analyze digital evidence, perform forensic triage, malware investigation, log analysis, and timeline reconstruction while maintaining chain-of-custody procedures.
• Develop response playbooks, tune detections, improve use cases, and support SOAR workflows, tabletop exercises, simulations, and purple-team activities.
• Track MTTD, MTTR, incident volume, severity, containment effectiveness, and detection fidelity; produce incident reports and post-incident reviews.

Requirements

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related discipline, or equivalent experience.
• Minimum 3 years of progressive information security experience.
• Strong understanding of incident response methodologies, the attack lifecycle, and containment strategies.
• Experience with one or more EDR platforms, such as Microsoft Defender for Endpoint, SentinelOne, CrowdStrike, or equivalent.
• Experience with SIEM technologies, such as Microsoft Sentinel, Google SecOps, Splunk, QRadar, or similar platforms.
• Knowledge of Microsoft 365, Entra ID, Active Directory, and cloud security concepts.
• Understanding of MITRE ATT&CK, threat intelligence, and threat-hunting methodologies.
• Familiarity with Windows, Linux, and macOS.
• Ability to analyze logs, indicators of compromise, and attacker techniques.
• Experience with PowerShell, Python, KQL, or other scripting and query languages.

Culture & Benefits

• Hybrid work with required on-site presence and cross-functional collaboration.
• Participation in after-hours incident response and on-call rotations as required.
• Medical, dental, vision, life, disability, fertility, wellness, and paid sick-time benefits.
• Paid time off, holidays, an Employee Assistance Program, and a Calm subscription.
• 401(k) with immediate vesting, HSA and FSA options, commuter benefits, and employee discounts.
• Paid maternity and paternity leave, including for adoptive parents, legal-plan options, and pet insurance.

Hiring process

• Final candidates must complete post-offer verification processes related to the role and applicable laws.
• Reasonable accommodation is available upon request.