Cloud SOC Analyst - Incident Response & Threat Hunting

New York Life Insurance Co.; New York (NY); Hybrid; USD 100,000 - 143,000; Full time

Benefits offered by this job

Leave programs

Adoption assistance

Student loan repayment programs

Job summary

New York Life Insurance Co. is seeking a SOC Analyst with cloud security and incident‑response expertise to join the Cyber Security Operations team in a hybrid setting. You will monitor alerts, investigate incidents, and drive post‑incident reviews across cloud and on‑prem environments.

The role requires hands‑on experience with AWS, GCP, or Azure, SIEM/EDR/XDR tools, and a strong knowledge of IAM, Zero Trust, and MITRE ATT&CK. In‑person interview at NY Home Office is required for offers.

Qualifications

• Bachelor's degree required or equivalent work experience in cybersecurity/IT.
• 3–4 years in Security Operations, Incident Response, or Cyber Defense.
• Hands-on with AWS, GCP, or Azure cloud platforms.
• Experience with SIEM solutions (Splunk, Chronicle, Elastic).
• Experience with EDR/XDR platforms (CrowdStrike, SentinelOne, Cortex XDR).
• Strong monitoring, log analysis and threat detection abilities.

Responsibilities

• Monitor security alerts and events using SIEM, EDR, XDR, and cloud-native tools.
• Investigate and respond to incidents across cloud and on-prem environments.
• Perform containment, eradication, recovery, and post-incident reviews.

Skills

AWS

GCP

Azure

SIEM

EDR/XDR

Threat Hunting

Incident Response

Cloud Security

IAM

Zero Trust

MFA

Python

PowerShell

Bash

Networking

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Splunk

Google Chronicle

Elastic

CrowdStrike Falcon

SentinelOne

Cortex XDR

Job description

New York Life Insurance Co. is seeking a SOC Analyst with cloud security and incident‑response expertise to join the Cyber Security Operations team in a hybrid setting. You will monitor alerts, investigate incidents, and drive post‑incident reviews across cloud and on‑prem environments.

The role requires hands‑on experience with AWS, GCP, or Azure, SIEM/EDR/XDR tools, and a strong knowledge of IAM, Zero Trust, and MITRE ATT&CK. In‑person interview at NY Home Office is required for offers.