Cybersecurity Senior Specialist – Threat Hunter

Location: Rosemead, California, US; hybrid work with required on-site days at an SCE facility. Employees are generally required to work and reside in California. Up to 10% travel within the SCE service territory. Relocation may apply.

Salary: $143,900–$215,800 annually

Company

hirify.global provides electric utility services and operates critical energy infrastructure focused on safety, reliability, and cleaner energy.

What you will do

• Conduct hypothesis-driven threat hunting across enterprise and operational technology environments.
• Use threat intelligence, behavioral analytics, and attacker TTPs to identify malicious activity and previously undetected threats.
• Analyze endpoint, network, identity, cloud, email, and OT telemetry to investigate suspicious activity and identify indicators of compromise.
• Translate hunting findings into detections, analytics, alerts, dashboards, and automated monitoring with Detection Engineering, Incident Response, and SOC teams.
• Investigate suspected attacks, support incident response and forensics, and recommend remediation for technology risks.
• Research malware, intrusion techniques, and emerging threats while reporting findings and recommendations to technical teams and leadership.

Requirements

• Five or more years of experience in information technology, information security, and/or cybersecurity.
• US citizenship required.
• Experience with threat hunting, incident response, detection engineering, cyber defense, or security operations in complex enterprise environments.
• Knowledge of MITRE ATT&CK, adversary behavior, intrusion methodologies, and threat intelligence-driven analysis.
• Experience with security telemetry, EDR/XDR, SIEM, NDR, cloud security monitoring, threat intelligence platforms, and security orchestration tools.
• Ability to use scripting, automation, and data analysis technologies such as PowerShell, Python, KQL, Splunk SPL, or SQL.

Nice to have

• Experience with OT/ICS cybersecurity and critical infrastructure threats.
• Certifications such as GCFA, GCTI, GCFR, GMON, GCDA, CISSP, or Azure Security Engineer Associate.

Culture & Benefits

• Hybrid work arrangement combining facility-based work with remote days.
• Work supporting cleaner energy, operational reliability, and critical infrastructure security.
• Up to 10% field travel across the SCE service territory.
• NERC/CIP-impacting position requiring a Personnel Risk Assessment or background investigation, specified training, and authorization before unescorted access.

Hiring process

• Further hybrid work details will be discussed during the interview.
• Successful candidates must complete required risk assessment or background investigation and NERC/CIP training before performing assigned duties.