Expert Service Operations Security / SOC (Cybersecurity)

Location: Amman, Jordan; hybrid work with the option to work from home up to 2 days per week, depending on team needs

Company

hirify.global provides technology and communications solutions for airports, airlines, borders, and transportation and government organizations worldwide.

What you will do

• Act as the highest technical escalation point for SOC investigations, monitoring activities, and high-severity security events.
• Lead advanced investigations across endpoint activity, network events, security telemetry, and investigative evidence.
• Provide technical leadership and mentoring to SOC Analysts and Senior SOC Analysts.
• Design, implement, validate, tune, and improve detection use cases, correlation rules, analytics, and monitoring content.
• Map detection coverage to MITRE ATT&CK and improve SIEM, SOAR, XDR, and security monitoring integrations through automation.
• Prepare technical reports and recommendations and support SIRT, audits, cyber simulations, security assessments, and incident escalations.

Requirements

• 5–8 years of experience in Security Operations or Cyber Defense, including at least 3 years in a SOC role.
• Advanced expertise in security investigations, detection engineering, security monitoring, and technical SOC operations.
• Expert knowledge of SIEM, SOAR, and XDR platforms; Elastic, Cortex, Microsoft Defender, and CrowdStrike are preferred platform examples.
• Strong hands-on experience with Python, PowerShell, APIs, and security automation.
• Strong knowledge of Azure or cloud security, identity security, and enterprise security environments.
• Practical ability to apply the MITRE ATT&CK framework and use threat intelligence to improve detection, investigations, monitoring, and SOC readiness.
• Ability to communicate complex technical findings through reports, briefings, and recommendations for technical and senior stakeholders.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, or a related field.
• At least one recognized cybersecurity certification, such as CISSP, GCIH, GCIA, SC-200, CySA+, or ECIH.

Nice to have

• Experience evaluating, testing, and implementing new security technologies and SOC capabilities.
• Experience participating in tabletop exercises, cyber simulations, audits, and security assessments.
• Ability to translate detection gaps, security risks, and technical findings into actionable recommendations for SOC leadership and CISO-level stakeholders.

Culture & Benefits

• Inclusive, diverse environment operating across 200 countries and 60 languages and cultures.
• Flex Day arrangements to adapt the workday to personal needs.
• Flex-Location benefit allowing work from any location in the world for up to 30 days per year.
• Employee Assistance Program and Champion Health wellbeing support for employees and dependents.
• Access to professional development platforms and programs, including LinkedIn Learning, Microsoft’s Enterprise Skills Initiative, Pluralsight, Harvard Business Publishing, and Stanford programs.
• Competitive benefits aligned with the local market and employment status.