Job Description

Be Part Of A High-Performing Team Join a global financial services technology organization dedicated to protecting critical banking systems, sensitive information, and enterprise infrastructure against evolving cyber threats. The organization operates in a highly regulated environment where cybersecurity, operational resilience, and continuous improvement are essential to business success. This opportunity sits within an established Security Operations Center (SOC), working alongside cybersecurity specialists focused on threat detection, incident response, digital forensics, and proactive security operations. The team emphasizes technical investigation, collaboration, and innovation, leveraging advanced security technologies to strengthen defenses and improve the effectiveness of enterprise security monitoring. What's In Store For You Remote work opportunity supporting enterprise cybersecurity operations. Engagement: W2 only (no C2C/1099). Work with an experienced SOC team responsible for protecting a complex financial services environment. Gain exposure to advanced security monitoring, threat hunting, incident response, and security automation technologies. Collaborate with specialists across detection engineering, incident response, and security automation. Contribute to continuous improvements in cybersecurity processes, detection capabilities, and operational efficiency. How You Will Make An Impact Investigate cybersecurity alerts and suspicious activity to determine potential threats, assess severity, identify root causes, and coordinate appropriate responses. Perform detailed incident investigations, including analyzing attacker behavior, identifying compromised assets, and reconstructing security events. Conduct proactive threat hunting across enterprise systems to identify suspicious behavior that may have bypassed existing security controls. Apply the MITRE ATT&CK framework and cyber kill chain concepts to analyze adversary tactics, techniques, and procedures (TTPs). Leverage SIEM, EDR, NDR, XDR, and behavioral analytics technologies to investigate threats and improve detection effectiveness. Partner with detection engineering teams to identify monitoring gaps, reduce false positives, and enhance security alerting capabilities. Collaborate with security automation specialists to streamline repetitive investigation and response activities. Support digital forensic investigations and contribute technical findings during cybersecurity incidents. Develop, maintain, and improve SOC investigation procedures, incident response playbooks, and operational documentation. Evaluate emerging attack techniques and assess the organization's ability to detect and respond to them. Analyze security activity across Windows, Linux, Active Directory, cloud environments, and enterprise networks. Contribute to security initiatives that improve operational resilience, response efficiency, and overall cybersecurity maturity. Requirements Are You An Experienced SOC And Incident Response Professional Ready To Make An Impact? 4+ years of professional cybersecurity experience , preferably involving hands-on SOC operations, incident response, threat hunting, or digital forensics. Candidates with 5–7 years of relevant experience are particularly aligned with the role. Demonstrated experience investigating security alerts, analyzing suspicious activity, and responding to cybersecurity incidents. Strong understanding of enterprise security monitoring technologies, including SIEM, EDR, NDR, XDR, and UEBA. Working knowledge of the MITRE ATT&CK framework, cyber kill chain methodology, and common attacker techniques. Experience investigating security events involving Windows, Linux, Active Directory, and cloud technologies. Knowledge of network security concepts, including firewalls, proxy servers, email security, and network traffic analysis. Ability to distinguish genuine security threats from false positives and recommend improvements to detection logic. Familiarity with threat hunting methodologies, digital forensics, and incident response procedures. Strong analytical and troubleshooting skills with the ability to investigate complex technical issues independently. Excellent written and verbal communication skills, particularly when documenting investigations and communicating technical findings. Ability to prioritize competing incidents and responsibilities in a fast-paced security operations environment. Self-motivated, detail-oriented, and committed to continuous learning and cybersecurity improvement. Professional certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or comparable credentials are advantageous but not required.