Security & Risk Security Engineer - Incident Response

TL;DR

Security & Risk Security Engineer - Incident Response (Cybersecurity): Conduct in-depth research and strategic analysis of intelligence data for threat hunting and anomaly detection in hirify.global's enterprise environment with an accent on vulnerabilities, threat actors, IOCs, and TTPs. Focus on building detections, response workflows, countermeasures, and incident playbooks while providing triage support and presenting insights to leadership.

Location: Hybrid work from hirify.global Interactive offices in New York, NY. Part-time telecommuting is an option.

Salary: $146,557.00 to $194,775.00 per annum

Company

hirify.global provides expert instruction, world-class content, innovative hardware, and software for workout experiences at home, outdoors, or gym. Headquartered in New York City with millions of members across US, UK, Canada, Germany, Australia, and Austria.

What you will do

• Conduct research and analysis of intelligence data from various sources for threat hunting.
• Stay updated on vulnerabilities, threat actors, IOCs, TTPs, and trends to identify actionable threats.
• Provide intel-driven insights into threats and search for anomalous/malicious activity in the enterprise.
• Work with Security Engineering and SOC to baseline behaviors, build detections, and response workflows.
• Offer triage support for incident response and investigations.
• Recommend and build countermeasures; develop and maintain security incident playbooks.
• Prepare briefings, reports, and dashboards for managers and leadership.

Requirements

• Hybrid work from offices in New York, NY; part-time telecommuting option.
• Master’s degree (or foreign equivalent) in Computer Science, Informatics, Computer and Information Technology, Engineering (any field), or related quantitative discipline.
• Three (3) years of experience in the job offered or related field.
• One year of experience in: Cloud Workload protection, Cloud Native application protection platform, Cloud Security Posture Management, Threat modeling, OWASP top 10, BURP Suite, SAST, Software Composition Analysis, API Security, code reviews, Kubernetes Security, Web Application Firewall (WAF), ELK Stack, Splunk.

Culture & Benefits

• Equal opportunity employer complying with federal, state, and local fair employment laws.
• Considers qualified applicants with arrest or conviction records per applicable fair chance ordinances.
• Embraces technology including AI for productivity, but no AI tools in hiring process.