Senior Security Operations Analyst (Detection & Response)

Location: Remote within hirify.global's states of operation in the United States; local or 100% remote work is supported. The role includes an off-hours 24/7 on-call and incident-response rotation.

Annual base salary: $117,800–$130,200 for Tier 3, $127,300–$140,700 for Tier 2, or $151,050–$166,950 for Tier 1, depending on location.

Company

hirify.global Digital Finance builds home-equity financial products that help homeowners access the value of their homes.

What you will do

• Share the 24/7 on-call rotation with the security lead and independently triage, investigate, and contain security incidents.
• Build and maintain incident-response runbooks, escalation paths, post-incident reviews, metrics, and audit-ready evidence.
• Engineer and tune SIEM detections, correlation rules, dashboards, and reporting in Coralogix across cloud and identity log sources.
• Manage vulnerabilities, prioritize findings, coordinate remediation with system owners, and report on risk reduction.
• Develop detection-as-code and lightweight SOAR automation to accelerate alert triage and response.
• Use AI and LLM tooling to improve investigation, correlation, detection engineering, and security-operations workflows.

Requirements

• 5+ years of experience in security operations, incident response, SOC, or detection engineering.
• Independent experience participating in an on-call or incident-response rotation and handling incidents end to end.
• Strong SIEM experience with detections, correlation rules, dashboards, and log-source onboarding; Coralogix, Splunk, Elastic, or Microsoft Sentinel experience is applicable.
• Practical AWS and Google Workspace security experience, including identity and log sources.
• Working knowledge of vulnerability management and Python or similar scripting for detection-as-code and SOAR workflows.
• Must be authorized to work in the United States and reside in one of hirify.global's states of operation.

Nice to have

• Experience in regulated financial services or fintech, including GLBA, NYDFS Part 500, or SOC 2.
• Relevant security certifications such as GIAC, CySA+, Security+, or AWS Security Specialty.
• Experience establishing detection and response practices from an early-stage or greenfield environment.

Culture & Benefits

• Remote-first work with optional in-person collaboration at the Palo Alto headquarters.
• Medical, dental, vision, FSA, and HSA options.
• Unlimited paid time off, 10 company holidays, and paid parental leave.
• Equity, 401(k), life insurance, and short- and long-term disability coverage.
• Internet, mobile, wellness, and home-office stipends, plus company-provided equipment.