Security Engineer (Cybersecurity)

Location: Remote, US; hybrid work is available for candidates in the El Dorado Hills, CA or Chicago, IL metro areas. Due to FedRAMP requirements, candidates must be a U.S. Person.

Company

hirify.global develops zero-trust and zero-knowledge privileged access management and cybersecurity software for organizations worldwide.

What you will do

• Support security incident response, including triage, investigations, containment coordination, lessons learned, and corrective action tracking.
• Develop and maintain incident response playbooks, runbooks, escalation paths, and tabletop exercises.
• Operate and improve endpoint, SaaS, email, access control, and cloud security controls and tooling.
• Partner with Observability Engineering, Vulnerability Management, DevOps, IT, Engineering, and Application Security teams on investigations, remediation, and risk reduction.
• Support access governance, least-privilege initiatives, privileged access workflows, and secure authentication controls.
• Maintain security documentation and support evidence collection and operational readiness for SOC 2, ISO 27001, FedRAMP, GovRAMP, and NIST 800-53.

Requirements

• 5+ years of experience in Information Security, Security Engineering, or Security Operations in a SaaS or cloud-centric environment.
• Hands-on experience with incident response, investigations, runbooks, and post-incident reviews.
• Experience implementing and operating security controls across endpoints, SaaS applications, and cloud environments.
• Working knowledge of AWS, Azure, or GCP; SSO, MFA, RBAC; vulnerability and risk management; and modern security practices.
• Ability to collaborate with technical teams to drive remediation and measurable risk reduction.
• Must be a U.S. Person due to FedRAMP requirements.

Nice to have

• Experience with FedRAMP, GovRAMP, SOC 2, ISO 27001, or NIST 800-53 evidence collection and operational readiness.
• Experience with EDR, email security, SaaS security controls, identity security workflows, or privileged access processes.
• Scripting and automation experience with Python, Bash, or PowerShell, including API integrations.
• Exposure to detection engineering, threat intelligence, or SOAR-style automation.

Culture & Benefits

• 100% remote work with a hybrid option in selected US metro areas.
• Medical, dental, and vision insurance, including domestic partnerships.
• Employer-paid life insurance and supplemental life insurance options.
• Voluntary short- and long-term disability insurance.
• 401(k) plans, generous PTO, paid bereavement and jury duty leave, and above-market annual bonuses.