Senior Associate - Security Operations Center (SOC) Analyst

New York Life; New York (NY); Hybrid; USD 100,000 - 143,000; Full time

Job summary

New York Life is seeking a Security Operations Center (SOC) Analyst to monitor, detect, investigate, and respond to cyber threats across hybrid and cloud environments. You will leverage SIEM, EDR/XDR, and cloud-native security tools to protect our enterprise technology landscape.

You will perform threat hunting, malware analysis, and incident investigations while collaborating with security engineering, cloud, and infrastructure teams to improve detection capabilities and drive secure outcomes

Qualifications

• 3-4 years of experience in Security Operations, Incident Response or related cybersecurity discipline.
• Experience securing cloud environments (AWS/GCP) with cloud-native security services.
• Experience with SIEM/EDR/XDR platforms.
• Knowledge of incident response methodologies, threat detection, log analysis, IAM and Zero Trust.
• Scripting/Automation skills in Python/PowerShell/Bash and ability to leverage AI-enabled tools.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents across cloud and on-premises environments using SIEM, EDR/XDR, and cloud-native security platforms.
• Perform threat hunting, malware analysis, and incident investigations with phishing, ransomware, identity compromise, and other attacks; document findings and remediation actions.
• Analyze security telemetry across AWS, GCP, and cloud security services to identify indicators of compromise and strengthen controls.
• Develop and maintain incident response playbooks, SOPs, and automation workflows; participate in tabletop exercises and security assessments.
• Collaborate with cross-functional teams to improve cloud security posture and provide actionable reporting to stakeholders.

Skills

Cloud security

Threat hunting

Incident response

SIEM / EDR / XDR

Python / PowerShell / Bash

AWS / GCP security

MITRE ATT&CK / Zero Trust

Communication skills

Education

Bachelor's degree in Cybersecurity, Computer Science, IT or related field

Equivalent practical experience

Tools

AWS GuardDuty

AWS Security Hub

Microsoft Defender for Cloud

Google Cloud Security Command Center

Elastic

Splunk

Google Chronicle

CrowdStrike Falcon

SentinelOne

Palo Alto Cortex XDR

Job description

Location Designation: Hybrid - 3 days per quarter

Business Unit

Technology, Data, AI and Ventures (TDAV)

Business Unit Overview

Within the Tech, Data, AI, Ventures (TDAV) organization, our work is guided by a shared vision: deploying the power of technology, data, AI and ventures to accelerate sustainable competitive advantage for New York Life's businesses. We build solutions that power how we serve policy owners, agents, advisors and employees while delivering measurable business outcomes.

Across technology, data, AI, cyber, product, digital experience, architecture and infrastructure, TDAV combines the scale and investment of an industry leader, access to leading-edge technologies and the opportunity to help shape how a world-class financial services company competes in the AI era - all backed by the stability and purpose of a mutual company built to last.

Role Overview

The Cyber Security Operations team is seeking a Security Operations Center (SOC) Analyst to help protect New York Life's enterprise technology environment by monitoring, detecting, investigating, and responding to cyber threats across hybrid and cloud environments. This role combines hands-on incident response, cloud security operations, and threat detection to identify and mitigate evolving cyber risks while strengthening the organization's overall security posture.

As a member of the Security Operations Center, you will leverage SIEM, EDR/XDR, cloud-native security technologies, and threat intelligence to investigate security events, conduct threat hunting, and coordinate incident response activities. You will collaborate with security engineering, cloud platform, infrastructure, and application teams to improve detection capabilities, automate response processes, and support a resilient, secure technology environment.

What You'll Do

• Monitor, investigate, and respond to security alerts and incidents across cloud and on-premises environments using SIEM, EDR/XDR, and cloud-native security platforms, ensuring timely detection, containment, and resolution of cyber threats.
• Perform threat hunting, malware analysis, and incident investigations involving phishing, ransomware, identity compromise, unauthorized access, and other advanced attack techniques while documenting findings and recommending remediation actions.
• Analyze security telemetry and logs from cloud platforms, including AWS, Google Cloud Platform (GCP), and cloud security services, to identify indicators of compromise, emerging threats, and opportunities to strengthen security controls.
• Develop and maintain incident response playbooks, standard operating procedures, and automation workflows while participating in tabletop exercises, security assessments, and continuous improvement initiatives to enhance operational readiness.
• Collaborate with cross-functional technology and cybersecurity teams to improve cloud security posture, reduce operational risk, leverage AI-enabled security capabilities, and provide actionable reporting to technical and business stakeholders.

What You’ll Bring

Required Skills

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience) with 3-4 years of experience in Security Operations, Incident Response, Cyber Defense, or a related cybersecurity discipline.
• Hands-on experience securing cloud environments using Amazon Web Services (AWS) and/or Google Cloud Platform (GCP), including familiarity with cloud-native security services such as AWS GuardDuty, AWS Security Hub, Microsoft Defender for Cloud, or Google Security Command Center.
• Experience working with SIEM platforms such as Elastic, Splunk, or Google Chronicle, along with EDR/XDR technologies including CrowdStrike Falcon, SentinelOne, or Palo Alto Cortex XDR.
• Strong understanding of incident response methodologies, threat detection, log analysis, cloud identity security, MITRE ATT&CK, Cyber Kill Chain, Zero Trust principles, and identity and access management (IAM).
• Knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/S, VPNs, firewalls, IDS/IPS, proxy technologies, and the ability to investigate cloud-based attacks, privilege escalation, and lateral movement.
• Experience with scripting or automation using Python, PowerShell, or Bash, strong analytical and communication skills, and the ability to leverage AI-enabled tools to improve investigation quality and operational efficiency.

Preferred Skills

• Industry certifications such as GIAC Certified Incident Handler (GCIH), AWS Certified Security - Specialty, CompTIA Security+, CompTIA CySA+, or comparable cybersecurity certifications.
• Experience supporting a 24x7 Security Operations Center (SOC), implementing SOAR automation, and developing security orchestration workflows.
• Familiarity with container security, Kubernetes, Docker, Infrastructure as Code (Terraform or CloudFormation), and DevSecOps practices.
• Understanding of AI agents, AI frameworks, AI security risks, and emerging cyber threats targeting AI-enabled applications and platforms.

Success Measures

• Timely detection, investigation, and response to cybersecurity incidents.
• Continuous reduction in Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Accurate and comprehensive incident documentation, reporting, and root cause analysis.
• Ongoing improvement of cloud security posture and detection capabilities.
• Effective collaboration across cybersecurity, cloud, infrastructure, and application teams to reduce enterprise cyber risk.

Pay Transparency

Salary Range: $100,000-$143,000

Overtime eligible: Exempt

Discretionary bonus eligible: Yes

Sales bonus eligible: No

Actual base salary will be determined based on several factors but not limited to individual's experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.

Company Overview

At New York Life, our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology-, data-, and AI-enabled organization, we remain grounded in the values that drive lasting impact.

Our diverse business portfolio creates opportunities to make a difference across industries and communities - invite bold thinking, collaborative problem-solving, and purpose-driven innovation. Here, you’ll find the rare balance of long-standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress.

As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what's next, and your growth powers it.

Our Benefits

We provide a full package of benefits for employees - and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work. Click here to discover more about our comprehensive benefit options or visit our NYL Benefits Site.

Our Commitment to Inclusion

At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities. Click here to learn more about New York Life's leadership in this space.

Recognized as one of Fortune's World's Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by the Foundation. We're proud that due to our mutuality, we operate in the best interests of our policy owners. To learn more about career opportunities at New York Life, please visit the Careers page of www.NewYorkLife.com.

Visit our LinkedIn to see how our employees and agents are leading the industry and impacting communities.

Visit our Newsroom to learn more about how our company is constantly evolving to meet our clients' and employees' needs.