Job Description

Salary: $30,000 - 55,000 per year Requirements:

• 6–10 years of experience in a SOC, incident response, or threat detection function, including Tier 2/3 investigations.
• Bachelors degree in Information Security, Computer Science, or a related discipline; advanced credentials such as CISSP or CISM are preferred.
• Advanced hands-on proficiency with SIEM tools such as Splunk, QRadar, or Sentinel, plus EDR and SOAR platforms.
• Strong understanding of network security, Windows and Linux environments, identity systems, and common cloud log sources.
• Practical experience with the MITRE ATT&CK framework, threat hunting, IOC/IOA creation, and detection tuning.
• Proven ability to lead complex incidents, align stakeholders, and communicate effectively under pressure.
• Scripting or automation experience, for example Python or PowerShell, to improve investigations and workflows.
• Familiarity with NIST CSF/800-61, CIS Controls, and regulatory requirements that affect incident response.
• Strong documentation skills and an evidence-based approach to investigations.
• Preferred certifications include GCIA, GCED, GCIH, GCFA, GNFA, CISSP, CCSP, or equivalent experience.
• Experience with ticketing and case management systems such as ServiceNow and knowledge management practices is preferred.
• Prior exposure to threat intelligence platforms, sandboxing tools, and malware triage is a plus.

• Lead the triage and investigation of security alerts, escalating and coordinating incident response when required.
• Conduct root cause analysis, determine the scope of impacted assets, and drive containment, eradication, and recovery efforts.
• Correlate activity across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms to confirm true positives and reduce false alarms.
• Build, refine, and maintain SOC playbooks, runbooks, and detection logic aligned with the MITRE ATT&CK framework.
• Mentor junior analysts and coach them on investigation methods, documentation standards, and operational best practices.
• Work with Threat Intelligence to enrich investigations, track adversary TTPs, and proactively hunt for indicators of compromise.
• Partner with Engineering teams to fine-tune detections, improve log quality, and strengthen preventive controls.
• Produce clear incident reports and executive summaries, and contribute to metrics and trend analysis.
• Support purple team exercises and post-incident reviews to capture lessons learned and drive continual improvement.
• Ensure compliance with regulatory and security policies, while maintaining audit-ready investigation and incident documentation.
• Support coverage on a Tuesday–Saturday schedule, 8:00 AM–4:00 PM Eastern Time, with occasional flexibility during major incidents or planned exercises.

• AI
• Cloud
• Support
• Linux
• Network
• PowerShell
• Python
• Security
• ServiceNow
• Splunk
• Windows

More:

We are collaborating with hackajob to hire a Senior SOC Analyst for our Security Operations Center team. This role can be based in Pittsburgh, PA or Lake Mary, FL, and follows a Tuesday through Saturday schedule. At BNY, our culture helps us run our company better and supports employee growth and success. As a leading global financial services company at the center of the financial system, we influence nearly 20% of the worlds investible assets. Every day, our teams use cutting-edge AI and breakthrough technologies to work with clients, deliver transformative solutions, and help shape industries and communities worldwide. We are recognized as a destination for innovators, where bold ideas, advanced technology, and exceptional talent come together to power the future of finance.

last updated 41 week of 2026

Job Tags

Similar Jobs