SOC Senior Threat Analyst 2 (Nights / Weekends)

Visionaryz•Brooklyn, NY

42d•Onsite

About The Position

This role is for a Senior SOC Threat Analyst responsible for staffing 24x7x365 coverage at the City’s Security Operations Center (SOC). The analyst will augment FTE shift schedules, including days, nights, weekends, and holidays. The position requires strong leadership skills to mentor junior analysts, coordinate team activities, and manage SOC operations effectively. The analyst will monitor City networks and security alerts, correlate threat intelligence, produce routine metrics and reporting, maintain situation reports, and perform weekly quality control checks. Collaboration with Cyber Command teams, City agencies, vendors, and information-sharing partners is essential. This role also involves working closely with the SOC Director on incident preparation and the continuous development of new SOC playbooks and runbooks.

Requirements

Minimum 8 years of experience in Threat Management/SOC/Incident Response environment.
Leadership skills are a must, including the ability to lead and mentor junior analysts, coordinate team activities, and manage SOC operations effectively.
Prior experience working in a SOC environment is mandatory.
Familiarity with SOC operations, procedures, and tools such as SIEM (Security Information and Event Management) systems, intrusion detection/prevention systems (IDS/IPS), and endpoint detection and response (EDR) tools.
Excellent communication skills are crucial for effectively communicating security incidents, risks, and recommendations to technical and non-technical stakeholders, including SOC Director and senior management.

Nice To Haves

Knowledge of cybersecurity principles, practices, and procedures.
Strong understanding of network and host technologies.
Experience applying techniques for detecting host and network-based intrusion using IDS methods and technologies.
Experience with SIEM technologies, malware analysis and mitigation techniques.
Apply cybersecurity and privacy principles to organizational requirements (confidentiality, integrity, availability, authentication, non-repudiation).
Interpret information collected by diagnostic network tools (Netflow, security event logs, IDS systems, etc.).
Ability to investigate and solve complex problems.
Experience in incident response procedures and methodologies.

Responsibilities

Perform critical functions within the Threat Management discipline.
Staff 24x7x365 coverage at the City’s Security Operations Center (SOC), augmenting FTE shift schedules including days, nights, weekends, and holidays.
Interface with Cyber Command teams internally, with City agencies, vendors, and information-sharing partners.
Monitor City networks and security alerts for intrusion, attempted compromise, and anomalous behavior.
Apply mitigation techniques or escalation factors.
Correlate threat intelligence across various logs collected by established security controls.
Produce routine SOC metrics & reporting.
Maintain situation reports (SITREPS).
Perform weekly quality control checks.
Work closely with SOC Director on incident preparation including the continuous development of new SOC playbooks and runbooks.
Proactive threat hunting capabilities to identify and investigate potential security threats or anomalies within the environment before they escalate into incidents.
Analyze security incidents, contain threats, mitigate risks, and recover from security breaches effectively and efficiently.