Hands-On SOC Security Analyst—Microsoft Defender & SIEM

TEKsystems; United States; Hybrid; USD 55,000 - 62,000; Full time

Job summary

TEKsystems is seeking a hands-on Information Security Analyst to join a Security Operations Center. You will investigate live security events, automate workflows, and respond to incidents using Microsoft Defender for Endpoint, Sentinel, and SIEM tools in a hybrid Syracuse, NY setting.

The role requires 2+ years in cybersecurity and Microsoft security, plus 2+ years of scripting (Python/PowerShell). It’s a contract-to-hire position with pay $40–$45 per hour, depending on experience.

Qualifications

• 2+ years of cybersecurity / information security experience.
• 2+ years of current, hands-on Microsoft security experience, including Microsoft Defender for Endpoint and/or Microsoft Sentinel
• 2+ years of automation and scripting experience

Responsibilities

• SOC Operations & Security Engineering: Operate, tune, and improve SOC monitoring and detection platforms, with emphasis on Defender and SIEM; triage alerts; develop threat-hunting strategies; identify data sources; integrate tools into SOC workflows; write Python/PowerShell scripts; assist with firewall ruleset maintenance.
• Incident Response & Investigation: Serve as first responder; perform log/endpoint/system analysis; support containment and recovery; conduct digital forensics; document findings for stakeholders.
• Vulnerability Management: Support vulnerability scanning and assessment; prioritize remediation; coordinate with owners; track patching and verify remediation.
• SOC Development & Mentorship: Develop and maintain SOC processes/runbooks; mentor security analysts; coach on investigations, log analysis, and incident response practices

Skills

Cybersecurity experience

Microsoft security experience

Python scripting

PowerShell scripting

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

SIEM

Splunk

Kibana

Job description

TEKsystems is seeking a hands-on Information Security Analyst to join a Security Operations Center. You will investigate live security events, automate workflows, and respond to incidents using Microsoft Defender for Endpoint, Sentinel, and SIEM tools in a hybrid Syracuse, NY setting.

The role requires 2+ years in cybersecurity and Microsoft security, plus 2+ years of scripting (Python/PowerShell). It’s a contract-to-hire position with pay $40–$45 per hour, depending on experience.