Threat Analyst (Cybersecurity)

TL;DR

Threat Analyst (Cybersecurity): Investigating emerging cyber threats, APT adversaries, malware, and malicious infrastructure with an accent on threat intelligence, reverse engineering, Windows forensics, and MITRE ATT&CK analysis. Focus on identifying detection coverage gaps, producing actionable intelligence, and collaborating with Detection Engineering to improve enterprise threat detection.

Location: Orlando, Florida, United States; in-office position. The role may require occasional travel to company offices, customers, partners, trade shows, conferences, or other business locations.

Company

hirify.global develops enterprise cybersecurity and endpoint protection technologies, including application allowlisting, threat detection, and endpoint control solutions.

What you will do

• Identify and investigate emerging cybersecurity threats and track advanced persistent threat adversaries.
• Conduct malware analysis, reverse engineering, digital forensics, infrastructure investigations, and campaign research.
• Analyze Windows artifacts, telemetry, and malicious activity patterns using the MITRE ATT&CK framework.
• Produce technical blog posts, threat actor profiles, campaign reports, and threat landscape intelligence.
• Identify hirify.global Detect coverage deficiencies and collaborate with Detection Engineering to expand detection capabilities.
• Communicate findings and provide recommendations on product functionality and roadmap priorities.

Requirements

• At least 3 years of Information Security experience and 2 years of experience in malware analysis, reverse engineering, digital forensics, or a related field.
• Experience with Windows operating systems, forensic artifacts, persistence, privilege escalation, defense evasion, and parent-child process structures.
• Familiarity with malware analysis and reverse engineering tools such as IDA Pro, Binary Ninja, Detect It Easy, x64dbg, Malcat, or HxD.
• In-depth knowledge of the MITRE ATT&CK framework and enterprise security technologies.
• Strong analytical, critical-thinking, problem-solving, written, and verbal communication skills.
• Ability to work independently, manage multiple time-sensitive priorities, collaborate effectively, and communicate complex technical concepts to non-technical stakeholders.

Nice to have

• Content development or technical writing experience.
• Relevant GIAC certifications, including GCFA, GCIH, GCIA, GREM, or GISP.

Culture & Benefits

• In-office work within a collaborative Threat Intelligence and Detection Engineering environment.
• Opportunity to influence cybersecurity product functionality and roadmap decisions.
• Background check and drug/substance screening are required after a conditional offer.
• Randomized drug and substance testing is conducted approximately every 60 days.
• Reasonable workplace accommodations may be requested and evaluated in relation to essential job functions.