Security Operations Analyst — Incident Response & Risk

Bond, Schoeneck & King PLLC; City of Syracuse (NY); Hybrid; USD 95,000 - 105,000; Full time

Job summary

Bond, Schoeneck & King PLLC, a law firm with a strong information security program, seeks a Security Analyst to support the IT Department in a hybrid role across Buffalo, Albany, Rochester, or Syracuse, NY.

The role emphasizes monitoring security events, incident response, vulnerability management, identity governance, and compliance support to protect confidential client, attorney, and firm data while enabling effective legal practice.

Qualifications

• Bachelor’s Degree in cyber security, computer science, engineering, or related field is required.
• Security Certifications such as Security+, CySA+, SSCP, CISSP Associate, AZ-500, SC-200, SC-300, or similar credentials.
• Experience: 2+ years of experience in a cybersecurity or IT role.
• Technical Skills: Proficiency in using cybersecurity tools such as SIEM, IDS/IPS, EDR, and vulnerability scanners.
• Analytical Skills: Strong analytical and problem-solving skills; identify patterns and anomalies.
• Communication Skills: Excellent verbal and written communication; explain technical info to non-technical stakeholders.
• Attention to Detail: High attention to detail; ability to manage multiple tasks under pressure.
• Team Player: Collaborate with colleagues across departments.

Responsibilities

• Monitor, investigate, and respond to security events with documentation and timely escalation.
• Mature the Firm’s security operations, vulnerability management, identity governance, awareness and reporting.
• Translate security issues into risk language for IT leadership and non-technical stakeholders.
• Monitor alerts from SIEM, XDR/EDR, email security, identity, cloud, network, and vulnerability platforms.
• Triage activity, validate severity, document findings in incident records.
• Assist with identification, containment, eradication, recovery and post-incident documentation.
• Support vulnerability scanning and remediation tracking; coordinate with teams to address vulnerabilities.
• Assist with access reviews, MFA compliance, and data protection practices.
• Maintain security documentation and use security frameworks to align practices with risk tolerance.

Skills

SIEM

IDS/IPS

EDR

Vulnerability scanners

Analytical skills

Communication skills

Attention to detail

Team player

Education

Bachelor’s Degree in cyber security, computer science, engineering, or related field

Security Certifications such as Security+, CySA+, SSCP, CISSP Associate, AZ-500, SC-200, SC-300

Tools

SIEM

IDS/IPS

EDR

Vulnerability scanners

Job description

Bond, Schoeneck & King PLLC, a law firm with a strong information security program, seeks a Security Analyst to support the IT Department in a hybrid role across Buffalo, Albany, Rochester, or Syracuse, NY.

The role emphasizes monitoring security events, incident response, vulnerability management, identity governance, and compliance support to protect confidential client, attorney, and firm data while enabling effective legal practice.