Cybersecurity Senior Specialist – Threat Hunter

Location: Hybrid, with regular attendance at the SCE facility in Rosemead, California; employees are generally required to work and reside in California. The role includes up to 10% travel and field work throughout the SCE service territory.

Salary: $143,900–$215,800

Company

hirify.global provides electric utility services and supports clean energy, safety, and reliable power delivery.

What you will do

• Conduct hypothesis-driven threat hunting across enterprise and operational technology environments to identify malicious activity, advanced adversary behavior, and previously undetected threats.
• Use cyber threat intelligence, industry reporting, attacker tradecraft, and security telemetry from endpoints, networks, cloud services, identities, email, and OT systems to investigate suspicious activity.
• Identify detection and visibility gaps, develop monitoring metrics, alerts, dashboards, reports, analytics, and automated detection capabilities.
• Perform security risk and vulnerability assessments, business impact analysis, incident investigations, forensic activities, and evidence reviews for audits.
• Maintain incident response plans, manage security incidents, implement security controls, and protect sensitive customer, medical, proprietary, financial, physical, and cybersecurity data.
• Collaborate with Detection Engineering, Incident Response, SOC, Red Team, Blue Team, Cyber Defense, IT, Cloud, OT, and business stakeholders; communicate findings and remediation recommendations to technical teams and leadership.

Requirements

• Five or more years of experience in information technology, information security, and/or cybersecurity.
• US citizenship is required.
• Experience as a Threat Hunter, Incident Responder, Detection Engineer, or Cyber Defense professional in complex enterprise environments, with collaboration across Cybersecurity, IT, Cloud, and OT organizations.
• Experience with hypothesis-driven threat hunting using threat intelligence, behavioral analytics, and attacker tactics, techniques, and procedures.
• Strong understanding of adversary tactics, techniques, and procedures using frameworks such as MITRE ATT&CK, including mapping observed activity to threat actor behaviors and intrusion methodologies.
• Experience correlating endpoint, network, identity, cloud, email, and security monitoring telemetry to identify indicators of compromise and suspicious activity.
• Experience partnering with Detection Engineering, Incident Response, and SOC teams to develop, validate, and optimize detection content, use cases, analytics, and automated response capabilities.
• Experience or familiarity with OT/ICS cybersecurity, critical infrastructure threats, operational reliability requirements, and industrial control system security.
• Ability to use scripting, automation, and data analysis technologies including PowerShell, Python, KQL, Splunk SPL, and SQL.
• Experience with EDR/XDR, SIEM, NDR, cloud security monitoring, threat intelligence platforms, and security orchestration tools.

Nice to have

• Relevant certifications such as GCFA, GCTI, GCFR, GMON, GCDA, CISSP, Azure Security Engineer Associate, or equivalent cybersecurity certifications.

Culture & Benefits

• Hybrid work mode with a set number of days at an SCE facility and remote work on remaining days.
• Work supporting clean energy, reduced carbon emissions, safety, and reliable power delivery.
• Relocation may apply.
• The position is NERC/CIP impacted and requires a Personnel Risk Assessment or Background Investigation before hiring.
• Specified training is required before unescorted access to assigned work locations and performance of necessary duties.

Hiring process

• Work mode details will be discussed during the interview.
• Successful candidates must complete the required personnel risk assessment or background investigation and specified pre-access training.