Principal Cybersecurity Analyst (DFIR)

Location: Hybrid, Sofia, Bulgaria

Company

hirify.global provides software for developing, deploying, and managing responsible AI-powered applications and experiences.

What you will do

• Lead enterprise-level incident response for critical security breaches as the ultimate technical escalation point.
• Design and govern incident playbooks, detection models, and long-term threat detection strategies.
• Advise senior and executive leadership on technical risks, operational resilience, and security program evolution.
• Direct digital forensics, memory analysis, and reverse-engineering investigations across multi-cloud and on-premises environments.
• Lead security projects, evaluate defensive technologies, conduct architecture reviews, and drive post-incident improvements.
• Mentor analysts across all levels and shape internal DFIR standards.

Requirements

• Bachelor’s degree in Cybersecurity or a related field.
• 6–8 years of hands-on experience in cybersecurity operations, incident response, or digital forensics.
• CHFI, GNFA, GCFA, or an equivalent advanced DFIR/cybersecurity certification.
• Expert knowledge of MITRE ATT&CK, NIST CSF, security tools, cloud platforms, and enterprise architecture.
• Experience leading security initiatives that influence organizational risk and security architecture.
• Advanced scripting, automation, custom detection tooling, and communication with C-suite stakeholders.

Culture & Benefits

• 30 days of paid annual vacation, plus a birthday day off and two additional volunteering days.
• Premium healthcare and dental coverage, additional pension insurance, and an employee stock purchase plan.
• Flexible working hours and the opportunity to work from home within the hybrid setup.
• On-site gym with CrossFit equipment and a climbing wall, plus a co-funded Multisport card.
• Free underground parking and designated spaces for bikes and electric scooters.