Senior Cybersecurity Analyst (SOC, Incident Response & Threat Hunting)

Axiom Path•New York, NY

2d•Remote

About The Position

Join a cybersecurity operations team supporting a global financial services organization in protecting critical technology infrastructure, sensitive information, and business operations in a highly regulated banking environment. The team strengthens cyber defense capabilities, improves threat visibility, and maintains operational resilience against evolving security risks. The role collaborates with professionals across Security Operations, Cyber Incident Response, Threat Hunting, Detection Engineering, and Security Automation, with an emphasis on investigative excellence, technical collaboration, continuous improvement, and proactive security practices. This is a remote contract opportunity aligned with a New York-based cybersecurity team, with an engagement period from November 30, 2026, through March 31, 2027. The role uses cybersecurity monitoring, detection, investigation, and response technologies and contributes to initiatives that improve detection accuracy, accelerate incident response, and reduce operational risk.

Requirements

At least 4 years of hands-on cybersecurity experience, preferably in a SOC, CSIRT, or DFIR environment.
Strong experience investigating cybersecurity alerts, identifying malicious activity, and supporting incident containment and remediation.
Understanding of MITRE ATT&CK, Cyber Kill Chain methodologies, attacker behaviors, and investigative techniques.
Hands-on experience with security monitoring and response technologies, including SIEM, EDR, NDR, XDR, or UEBA platforms.
Working knowledge of Windows, Linux, Active Directory, cloud environments, and enterprise security infrastructure.
Understanding of network security technologies, including firewalls, proxy servers, email security, and network traffic analysis.
Experience conducting security investigations, identifying root causes, and developing actionable remediation recommendations.
Ability to recognize false positives, investigate detection gaps, and collaborate on improvements to security monitoring capabilities.
Strong analytical thinking and troubleshooting skills, with the ability to independently investigate complex security events.
Excellent written and verbal communication skills, including the ability to clearly document technical findings and investigation outcomes.
Ability to manage multiple security priorities while maintaining accuracy and responsiveness.

Nice To Haves

Familiarity with proactive threat hunting, digital forensics, detection engineering, or purple teaming activities.
Cybersecurity certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or equivalent credentials.

Responsibilities

Investigate security alerts, suspicious activity, and potential cyber incidents to determine severity, root cause, and business impact.
Conduct detailed incident investigations, reconstruct attacker activity, identify compromised systems, and support containment and remediation.
Perform proactive threat hunting to uncover malicious behavior that may evade existing security monitoring controls.
Analyze adversary tactics, techniques, and procedures using MITRE ATT&CK and Cyber Kill Chain frameworks.
Use SIEM, EDR, NDR, XDR, and UEBA technologies to improve security visibility and response capabilities.
Identify detection gaps, refine alert logic, and reduce false positives to improve SOC efficiency and investigation quality.
Partner with Detection Engineering and Security Automation teams to strengthen monitoring coverage and streamline response workflows.
Support purple teaming activities and adversary simulations to evaluate detection and response effectiveness.
Create, maintain, and improve security investigation procedures, incident response playbooks, and technical documentation.
Investigate security events across Windows, Linux, Active Directory, network infrastructure, and cloud environments.
Support cybersecurity technology enhancements and operational initiatives designed to improve enterprise security resilience.