Senior Vulnerability Analyst (Cybersecurity)

Location: Chicago, Illinois, United States; four days per week in the office under a flex/hybrid work model. Must be legally authorized to work in the United States without employer sponsorship.

Base salary: $121,550–$157,300 annually, plus possible incentive compensation and long-term equity participation.

Company

hirify.global provides financial market infrastructure, trading, clearing, and investment solutions for market participants worldwide.

What you will do

• Operate and continuously improve a risk-based vulnerability management program for global IT infrastructure.
• Analyze scan results, assess enterprise risk, and coordinate remediation with infrastructure, application, and platform teams.
• Design, maintain, and improve vulnerability scanning and assessment infrastructure.
• Automate vulnerability detection, analysis, remediation tracking, reporting, and integrations across security and infrastructure tools.
• Evaluate emerging vulnerabilities, threats, and security technologies, and present risks, trends, and escalations to technical and executive stakeholders.
• Mentor junior staff, document standards and procedures, and serve as a senior technical escalation point.

Requirements

• At least 5 years of information security experience, or 3 years in security plus 2–3 years in core IT roles.
• Expert hands-on experience with vulnerability management and cloud/SaaS security platforms such as Qualys, Tenable, Rapid7, Wiz, Reco, Obsidian, AppOmni, or Aqua.
• Strong Python scripting and automation skills for security operations, tool integration, and data analysis.
• Experience with Linux/Unix, Windows, Active Directory, Entra ID, managed network devices, and Microsoft security tooling.
• At least 2 years of experience in vulnerability monitoring, threat detection, event monitoring, or incident response, plus Jira and Confluence workflow experience.
• Availability for a 24/7 on-call rotation and legal authorization to work in the United States without visa sponsorship.

Nice to have

• Bachelor’s degree in cybersecurity, computer science, engineering, or another technical field.
• Centralized systems administration experience across Windows, Linux, networks, or firewalls.
• Security certifications such as GPEN, Security+, CISSP, OSCP, CEH, or LPT.
• Experience creating and applying AI tooling to solve security and automation problems.

Culture & Benefits

• Health, dental, vision, telemedicine, and mental health benefits.
• Paid vacation, personal, sick, parental, and community service leave.
• 2:1 401(k) match up to an 8% match immediately upon hire.
• Tuition assistance, education opportunities, charitable giving match, and employee stock purchase discounts.
• Office lunch, snacks, coffee, gyms, fitness discounts, and a flexible hybrid work environment.