Hybrid SOC Security Analyst & AI-Driven Defender

TEKsystems; United States; Hybrid; USD 55,000 - 62,000; Full time

Job summary

TEKsystems is seeking an Information Security Analyst in Syracuse, NY to defend client data assets through policy controls, security operations, incident response, and AI-assisted tooling. You will serve as a primary SOC defender, integrating threat detection, vulnerability management, and forensics within our ITS security operations.

The role requires hands-on work across SOC operations, scripting in Python, firewall management, Entra ID administration, and first-responder forensics.

Qualifications

• Hands-on experience across SOC operations: alert triage, log analysis, network interpretation.
• Scripting in Python 3 for automation and detection support.
• Firewall management, policy rulesets, and network security enforcement.
• Microsoft Entra ID administration including PowerShell scripting.
• Linux system administration across mixed-OS environments.
• Digital forensics at first-responder level, breach assessment, containment.

Responsibilities

• Operate, tune, and enhance SOC monitoring and detection platforms including Defender and SIEMs.
• Write Python and PowerShell scripts to automate detection, response, and data analysis.
• Lead and mentor student SOC employees and develop SOC processes and runbooks.
• Coordinate incident response, containment, eradication, and recovery efforts.
• Support vulnerability management and remediation coordination with system owners.

Skills

Security

Information security

Cyber security

Risk management

Compliance

Cloud

Firewall

Incident response

Vulnerability

Vulnerability management

Job description

TEKsystems is seeking an Information Security Analyst in Syracuse, NY to defend client data assets through policy controls, security operations, incident response, and AI-assisted tooling. You will serve as a primary SOC defender, integrating threat detection, vulnerability management, and forensics within our ITS security operations.

The role requires hands-on work across SOC operations, scripting in Python, firewall management, Entra ID administration, and first-responder forensics.