Information Security Analyst

TEKsystems; United States; Hybrid; USD 55,000 - 62,000; Full time

Job summary

TEKsystems is seeking a hands-on Information Security Analyst to join a Security Operations Center. You will investigate live security events, automate workflows, and respond to incidents using Microsoft Defender for Endpoint, Sentinel, and SIEM tools in a hybrid Syracuse, NY setting.

The role requires 2+ years in cybersecurity and Microsoft security, plus 2+ years of scripting (Python/PowerShell). It’s a contract-to-hire position with pay $40–$45 per hour, depending on experience.

Qualifications

• 2+ years of cybersecurity / information security experience.
• 2+ years of current, hands-on Microsoft security experience, including Microsoft Defender for Endpoint and/or Microsoft Sentinel
• 2+ years of automation and scripting experience

Responsibilities

• SOC Operations & Security Engineering: Operate, tune, and improve SOC monitoring and detection platforms, with emphasis on Defender and SIEM; triage alerts; develop threat-hunting strategies; identify data sources; integrate tools into SOC workflows; write Python/PowerShell scripts; assist with firewall ruleset maintenance.
• Incident Response & Investigation: Serve as first responder; perform log/endpoint/system analysis; support containment and recovery; conduct digital forensics; document findings for stakeholders.
• Vulnerability Management: Support vulnerability scanning and assessment; prioritize remediation; coordinate with owners; track patching and verify remediation.
• SOC Development & Mentorship: Develop and maintain SOC processes/runbooks; mentor security analysts; coach on investigations, log analysis, and incident response practices

Skills

Cybersecurity experience

Microsoft security experience

Python scripting

PowerShell scripting

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

SIEM

Splunk

Kibana

Job description

Were looking for a hands-on Information Security Analyst to join a Security Operations Center (SOC) environment and help protect enterprise systems, identities, endpoints, networks, and data.

This role is best suited for someone who is actively working with the Microsoft security stack today and is comfortable investigating live security events, automating security workflows, and responding to incidents. This is not primarily a governance or policy position. The successful candidate will be a hands-on security practitioner.

Top 3 Requirements

• 2+ years of cybersecurity / information security experience
• 2+ years of current, hands-on Microsoft security experience, including Microsoft Defender for Endpoint and/or Microsoft Sentinel
• 2+ years of automation and scripting experience, particularly Python and PowerShell

Preferred: Experience with Microsoft Purview

Experience

• 5+ years of Information Technology experience, including at least 2 years in Information Security or Cybersecurity
• Experience working within a SOC or comparable security operations environment, including hands-on alert triage, investigation of active incidents, and use of production security tooling
• Experience analyzing endpoint, identity, network, and security event data to identify and respond to threats

Required Technical Experience

Candidates should have 2+ years of hands-on experience with:

• Microsoft Defender for Endpoint, including alert triage, investigation, and response
• SIEM and SOC operations, including IDS/EDR alert triage, log analysis, and network traffic interpretation using Microsoft Sentinel, Splunk, Kibana, or similar platforms
• Python 3 scripting for security automation, data analysis, and SOC workflow support
• Firewall operations and network security fundamentals

Candidates should also have hands-on experience with:

• Windows and Active Directory
• PowerShell
• Endpoint log analysis
• Group Policy
• Linux system administration
• Digital forensics and incident response at a first-responder level

Preferred Experience

• Microsoft Purview
• Microsoft Entra ID
• AI-assisted security tools, including Microsoft Copilot or AI-enhanced SIEM/security capabilities
• Vulnerability assessment and remediation programs
• Threat hunting and development of detection strategies

What Youll Do

SOC Operations & Security Engineering

• Operate, tune, and recommend improvements to SOC monitoring and detection platforms, with particular emphasis on Microsoft Defender and SIEM technologies
• Triage security alerts and investigate potentially malicious activity
• Develop threat-hunting and detection strategies
• Identify additional data sources that can strengthen threat detection and investigation
• Integrate security tools and applications into SOC workflows
• Write Python and PowerShell scripts to automate detection, response, investigation, and data-analysis processes
• Assist with firewall ruleset maintenance and network security controls

Incident Response & Investigation

• Serve as a first responder for cybersecurity incidents
• Perform log, endpoint, and system-level analysis to determine the scope and potential impact of security events
• Support containment, eradication, and recovery activities
• Conduct first-responder digital forensic analysis and preserve relevant evidence
• Clearly document and communicate incident findings to technical and non-technical stakeholders

Vulnerability Management

• Support vulnerability scanning and assessment activities
• Analyze security findings and help prioritize remediation based on exploitability and business impact
• Coordinate remediation with system and application owners
• Track patching and validate remediation of critical vulnerabilities

SOC Development & Mentorship

• Help develop, document, and maintain SOC processes, investigation runbooks, and escalation procedures
• Provide guidance and mentorship to developing security analysts
• Coach team members on alert investigation, log analysis, documentation, and incident-response practices

What Makes Someone Successful in This Role

The strongest candidate combines current Microsoft security expertise with hands-on SOC experience. You should be comfortable moving from a Microsoft Defender alert or Sentinel event into an investigation, analyzing multiple data sources, determining risk, documenting findings, and helping drive the appropriate response.

Youll also need:

• Strong cross-functional collaboration skills
• Clear written and verbal communication
• Analytical precision across multiple security data sources
• Composure during active security incidents
• Ability to explain technical security findings to both technical and non-technical audiences
• Commitment to continuous technical learning

Job Type & Location

This is a Contract to Hire position based out of Syracuse, NY.

Pay and Benefits

The pay range for this position is $40.00 - $45.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your jobclassification and length of employment. Benefits are subject to change and may besubject to specific elections, plan, or program terms. If eligible, the benefitsavailable for this temporary role may include the following:Medical, dental & visionCritical Illness, Accident, and Hospital401(k) Retirement Plan Pre-tax and Roth post-tax contributions availableLife Insurance (Voluntary Life & AD&D for the employee and dependents)Short and long-term disabilityHealth Spending Account (HSA)Transportation benefitsEmployee Assistance ProgramTime Off/Leave (PTO, Vacation or Sick Leave)

Job Type & Location

This is a Contract to Hire position based out of Syracuse, NY.

Application Deadline

This position is anticipated to close on Nov 6, 2026.

Workplace Type

This is a hybrid position in Syracuse,NY.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.