Compliance Research Analyst (Cybersecurity)

Location: Pune, India

Company

hirify.global develops cybersecurity and compliance solutions for managing security risks and technical controls.

What you will do

• Research security configuration requirements for Linux, Windows, macOS, databases, applications, and network devices.
• Study CIS Benchmarks and DISA STIG requirements and help create technical compliance controls.
• Map controls to NIST, MITRE ATT&CK, PCI-DSS, ISO 27001, and other security frameworks.
• Document control descriptions, rationale, risks, and remediation guidance.
• Review and update compliance content as benchmarks and frameworks evolve.
• Collaborate with Product, Development, QA, and Infrastructure teams to analyze compliance gaps and validate controls.

Requirements

• 0–3 years of experience in Linux administration, cybersecurity, technical support, system administration, or compliance.
• Strong Linux knowledge, including filesystem hierarchy, users and permissions, SSH, sudo, PAM, cron, logging, filesystems, mounts, and sysctl.
• Hands-on experience with at least one RHEL-based distribution and familiarity with Ubuntu or Debian.
• Basic understanding of operating system security, networking, CIS Benchmarks, DISA STIG, NIST, ISO 27001, PCI-DSS, and MITRE ATT&CK.
• Ability to read, understand, troubleshoot, and make small modifications to Bash/Shell scripts.
• Strong analytical, research, communication, collaboration, and attention-to-detail skills.

Nice to have

• Knowledge of SELinux, auditd, audit rules, ausearch, and aureport.
• Exposure to Windows administration, macOS, databases, APIs, Postman, or Microsoft Security Compliance Toolkit.
• Regular expressions, Linux certifications such as RHCSA, LFCS, or Linux+, and security certifications such as Security+.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Culture & Benefits

• Collaborative work across Product, Development, QA, and Infrastructure functions.
• Opportunities to research emerging technologies and learn evolving security standards.
• Ownership of assigned compliance research and content-maintenance activities.