Information Security Analyst

TEKsystems • Town of Montezuma, NY

4d • $40 - $45 • Hybrid

About The Position

TEKsystems is seeking a hands-on Information Security Analyst for a Security Operations Center (SOC) environment. The role focuses on protecting enterprise systems, identities, endpoints, networks, and data through active security-event investigation, automation, and incident response. It is a practitioner-focused position rather than primarily a governance or policy role, with particular emphasis on current Microsoft security technologies.

The analyst will operate and improve SOC monitoring and detection platforms, investigate alerts and incidents, develop threat-hunting strategies, automate security workflows, and contribute to vulnerability management. The role also involves first-responder incident analysis, evidence preservation, communication of findings, and development of SOC procedures and analyst capabilities.

This is a contract-to-hire position based in Syracuse, New York, with a hybrid workplace. The posted pay range is $40.00–$45.00 per hour. The anticipated application deadline is November 6, 2026.

Requirements

• At least 2 years of cybersecurity or information security experience.
• At least 2 years of current, hands-on experience with Microsoft security, including Microsoft Defender for Endpoint and/or Microsoft Sentinel.
• At least 2 years of automation and scripting experience, particularly with Python and PowerShell.
• At least 5 years of information technology experience, including at least 2 years in information security or cybersecurity.
• Experience working in a SOC or comparable security operations environment, including hands-on alert triage, active incident investigation, and production security tooling.
• Experience analyzing endpoint, identity, network, and security-event data to identify and respond to threats.
• Hands-on experience with Microsoft Defender for Endpoint, including alert triage, investigation, and response.
• Experience with SIEM and SOC operations, including IDS/EDR alert triage, log analysis, and network traffic interpretation using Microsoft Sentinel, Splunk, Kibana, or similar platforms.
• Python 3 scripting experience for security automation, data analysis, and SOC workflow support.
• Experience with firewall operations and network security fundamentals.
• Hands-on experience with Windows and Active Directory, PowerShell, endpoint log analysis, Group Policy, and Linux system administration.
• First-responder-level digital forensics and incident response experience.
• Strong cross-functional collaboration skills and clear written and verbal communication.
• Analytical precision across multiple security data sources, composure during active security incidents, and the ability to explain technical findings to technical and non-technical audiences.
• Commitment to continuous technical learning.

Nice To Haves

• Experience with Microsoft Purview.
• Experience with Microsoft Entra ID.
• Experience with AI-assisted security tools, including Microsoft Copilot or AI-enhanced SIEM/security capabilities.
• Experience with vulnerability assessment and remediation programs.
• Experience with threat hunting and developing detection strategies.

Responsibilities

• Operate, tune, and recommend improvements to SOC monitoring and detection platforms, particularly Microsoft Defender and SIEM technologies.
• Triage security alerts and investigate potentially malicious activity.
• Develop threat-hunting and detection strategies and identify data sources that can strengthen detection and investigation.
• Integrate security tools and applications into SOC workflows.
• Write Python and PowerShell scripts to automate detection, response, investigation, and data-analysis processes.
• Assist with firewall ruleset maintenance and network security controls.
• Serve as a first responder for cybersecurity incidents.
• Analyze logs, endpoints, and systems to determine the scope and potential impact of security events.
• Support containment, eradication, and recovery activities.
• Conduct first-responder digital forensic analysis and preserve relevant evidence.
• Document and communicate incident findings to technical and non-technical stakeholders.
• Support vulnerability scanning and assessment activities.
• Analyze security findings and help prioritize remediation according to exploitability and business impact.
• Coordinate remediation with system and application owners, track patching, and validate remediation of critical vulnerabilities.
• Develop, document, and maintain SOC processes, investigation runbooks, and escalation procedures.
• Guide and mentor developing security analysts, including coaching on alert investigation, log analysis, documentation, and incident-response practices.

Benefits

• Medical, dental, and vision benefits, subject to eligibility and plan terms.
• Critical illness, accident, and hospital coverage, subject to eligibility and plan terms.
• 401(k) retirement plan, with pre-tax and Roth post-tax contributions available.
• Voluntary life and AD&D insurance for employees and dependents.
• Short- and long-term disability coverage.
• Health Spending Account (HSA).
• Transportation benefits.
• Employee Assistance Program.
• Time off or leave, such as PTO, vacation, or sick leave, subject to eligibility and plan terms.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed