Senior Cybersecurity Analyst – SOC, Incident Response & Threat Hunting

Axiom Path•Charlotte, NC

2d•Remote

About The Position

The Senior Cybersecurity Analyst works within an established Security Operations Center (SOC) for a global financial services technology organization. The role helps protect critical banking systems, sensitive information, and enterprise infrastructure in a highly regulated environment. The team focuses on threat detection, incident response, digital forensics, and proactive security operations, using advanced security technologies and continuous improvement to strengthen enterprise defenses. This remote opportunity is W2 only, with no C2C or 1099 arrangements. The analyst collaborates with SOC colleagues and specialists in detection engineering, incident response, and security automation. The role contributes to effective security monitoring, improved detection capabilities, operational resilience, and efficient investigation and response processes.

Requirements

At least 4 years of professional cybersecurity experience, preferably in hands-on SOC operations, incident response, threat hunting, or digital forensics; candidates with 5–7 years are particularly aligned.
Demonstrated experience investigating security alerts and suspicious activity and responding to cybersecurity incidents.
Strong understanding of SIEM, EDR, NDR, XDR, and UEBA security monitoring technologies.
Working knowledge of MITRE ATT&CK, cyber kill chain methodology, and common attacker techniques.
Experience investigating security events involving Windows, Linux, Active Directory, and cloud technologies.
Knowledge of network security concepts, including firewalls, proxy servers, email security, and network traffic analysis.
Ability to distinguish genuine security threats from false positives and recommend detection logic improvements.
Familiarity with threat hunting methodologies, digital forensics, and incident response procedures.
Strong analytical and troubleshooting skills, including the ability to investigate complex technical issues independently.
Excellent written and verbal communication skills, particularly for documenting investigations and communicating technical findings.
Ability to prioritize competing incidents and responsibilities in a fast-paced security operations environment.
Self-motivated, detail-oriented, and committed to continuous learning and cybersecurity improvement.

Nice To Haves

Professional certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or comparable credentials.

Responsibilities

Investigate cybersecurity alerts and suspicious activity to assess threats and severity, identify root causes, and coordinate appropriate responses.
Conduct detailed incident investigations, including analyzing attacker behavior, identifying compromised assets, and reconstructing security events.
Proactively hunt for suspicious behavior across enterprise systems that may have bypassed existing security controls.
Use MITRE ATT&CK and cyber kill chain concepts to analyze adversary tactics, techniques, and procedures.
Use SIEM, EDR, NDR, XDR, and behavioral analytics technologies to investigate threats and improve detection effectiveness.
Work with detection engineering teams to identify monitoring gaps, reduce false positives, and enhance security alerting.
Collaborate with security automation specialists to streamline repetitive investigation and response activities.
Support digital forensic investigations and contribute technical findings during cybersecurity incidents.
Develop, maintain, and improve SOC investigation procedures, incident response playbooks, and operational documentation.
Evaluate emerging attack techniques and assess the organization's ability to detect and respond to them.
Analyze security activity across Windows, Linux, Active Directory, cloud environments, and enterprise networks.
Contribute to initiatives that improve operational resilience, response efficiency, and cybersecurity maturity.