Senior Cybersecurity Analyst (SOC, Incident Response & Threat Hunting)

Axiom Path•New York, NY

19h•Remote

About The Position

Join a cybersecurity operations team supporting a global financial services organization in a highly regulated banking environment. The team protects critical technology infrastructure, sensitive information, and business operations while strengthening cyber defense capabilities, improving threat visibility, and maintaining operational resilience against evolving security risks. The role collaborates with professionals across Security Operations, Cyber Incident Response, Threat Hunting, Detection Engineering, and Security Automation. It focuses on investigative excellence, technical collaboration, continuous improvement, and proactive security practices. This is a remote position aligned with a New York-based cybersecurity team, offered on a W2-only contract from November 30, 2026, through March 31, 2027.

Requirements

Minimum 4+ years of hands-on cybersecurity experience, preferably in a SOC, CSIRT, or DFIR environment.
Strong experience investigating cybersecurity alerts, identifying malicious activity, and supporting incident containment and remediation.
Proven understanding of MITRE ATT&CK, Cyber Kill Chain methodologies, attacker behaviors, and investigative techniques.
Hands-on experience with security monitoring and response technologies, including SIEM, EDR, NDR, XDR, or UEBA platforms.
Working knowledge of Windows, Linux, Active Directory, cloud environments, and enterprise security infrastructure.
Understanding of network security technologies, including firewalls, proxy servers, email security, and network traffic analysis.
Experience conducting security investigations, identifying root causes, and developing actionable remediation recommendations.
Ability to recognize false positives, investigate detection gaps, and collaborate on improvements to security monitoring capabilities.
Strong analytical thinking and troubleshooting skills, with the ability to independently investigate complex security events.
Excellent written and verbal communication skills, including the ability to document technical findings and investigation outcomes clearly.
Ability to manage multiple security priorities while maintaining accuracy and responsiveness.

Nice To Haves

Familiarity with proactive threat hunting, digital forensics, detection engineering, or purple teaming activities.
Cybersecurity certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or equivalent credentials.

Responsibilities

Investigate security alerts, suspicious activity, and potential cyber incidents to determine severity, root cause, and business impact.
Conduct detailed incident investigations, reconstruct attacker activity, identify compromised systems, and support containment and remediation.
Perform proactive threat hunting to uncover malicious behavior that may evade existing security monitoring controls.
Analyze adversary tactics, techniques, and procedures using MITRE ATT&CK and Cyber Kill Chain frameworks.
Use SIEM, EDR, NDR, XDR, and UEBA technologies to improve security visibility and response capabilities.
Identify detection gaps, refine alert logic, and reduce false positives to improve SOC efficiency and investigation quality.
Partner with Detection Engineering and Security Automation teams to strengthen monitoring coverage and streamline response workflows.
Support purple teaming activities and adversary simulations to evaluate detection and response effectiveness.
Create, maintain, and improve security investigation procedures, incident response playbooks, and technical documentation.
Investigate security events across Windows, Linux, Active Directory, network infrastructure, and cloud environments.
Support cybersecurity technology enhancements and operational initiatives designed to improve enterprise security resilience.