SOC Analyst I

We operate two 24/7 network operations centers and a security operations center, staffed in three shifts.

The position

We need an SOC Analyst I. This is a contract position based in New York City, New York. The Cyber Defense team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter.

Main duties

• Tune noisy detection rules with the security engineering team.
• Write and update SOC runbooks and playbooks.
• Report on security awareness training and phishing simulation results.
• Escalate confirmed incidents and follow the incident response plan.
• Analyze reported phishing emails, check headers and URLs, and purge malicious messages.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.

What you need

• 1-2 years in an SOC, security analyst or IT security role.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• Basic scripting in PowerShell or Python.
• Must be able to pass a background check.

Nice to have

• CySA+, GCIH, GCIA or BTL1 certification.
• KQL or SPL query writing.
• Cloud log analysis (CloudTrail, Entra ID sign-in logs)

Schedule: Second shift, 2:00 PM to 10:30 PM, Monday to Friday

The base pay range for this position is $49.00-$58.00/hr. Actual pay depends on experience, skills and location.

What we offer

• Free parking.

We are an equal opportunity employer and value diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

This position requires a background check.

Duration: 3 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at New York City Business Technology.