Senior Cyber Security Analyst

Oakridge Staffing; New York (NY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Oakridge Staffing seeks a Senior Cyber Security Analyst for its NYC headquarters in a hybrid role within a Global retailer's Cyber Incident Response team. The position focuses on L2 SOC duties and incident response to protect systems and data from cyber threats.

The role requires strong experience in incident response, log analysis, and security tooling (SIEM, SOAR, EDR), with collaboration across IT, security risk, forensics, and legal teams to ensure a coordinated IR effort.

Qualifications

• Strong knowledge of networking, systems, identity, and cloud environments.
• Understanding of cybersecurity principles, incident response, forensics, vulnerability management.
• Experience with log analysis, endpoint investigation, attacker techniques (lateral movement, persistence, privilege escalation).
• Experience with security tools such as SOAR, SIEM, IDS/IPS, EDR, mail gateway, and other relevant technologies.
• Excellent proficiency in English; additional languages are a strong asset.
• Industry-recognized security certifications (e.g., CISSP, CEH, CISA, GSEC, GCIA, GCIH, GCFA, GPEN) are a strong asset.

Responsibilities

• Investigate and respond to cybersecurity incidents in real-time, including high-severity cases.
• Collaborate with a team of analysts to determine scope, root cause, attack techniques, and impact.
• Perform detailed analysis across endpoint, network, identity, and cloud data sources.
• Support forensic investigations, timeline reconstruction, and analysis of suspicious files.
• Develop and maintain incident response plans, playbooks, and SOPs to contain and mitigate incidents.
• Develop and enhance incident detections and triggers, aligned with threat landscape.

Skills

Incident response

SIEM/EDR

Network security

Cloud security

Log analysis

Investigation

English proficiency

Tools

SOAR

IDS/IPS

EDR

Job description

Global retailer is looking for a Senior Cyber Security Analyst for their NYC headquarters. This position is hybrid.

We are looking for a Senior SOC Analyst, within the Cyber Incident Response team to be an L2: This is a professional responsible for protecting computer systems, networks, and sensitive data from cyber-attacks, hacking attempts, and other security threats with past experience working in a SOC.

The role collaborates with other security and IT teams, leveraging available technology and systems to provide Incident Response services. In addition, the role contributes to other activities, such as participating in Group projects and initiatives with implications on IR services.

Responsibilities

• Investigate and respond to cybersecurity incidents in real-time, including handling more complex and high-severity cases.
• Work with a team of analysts to determine the scope, root cause, attack techniques, and impact of attacks.
• Perform detailed analysis across endpoint, network, identity, and cloud data sources, including log analysis, process activity, and authentication events.
• Support basic forensic investigations, including evidence collection, timeline reconstruction, and analysis of suspicious files or activities.
• Develop, implement, and maintain incident response plans, playbooks, and SOPs to contain and mitigate cybersecurity incidents.
• Develop and enhance incident detections and triggers, aligned with the evolving threat landscape and leveraging available technology (e.g., SIEM correlation, EDR detections).
• Operate with various systems in real-time to investigate, maintain, and track incidents across their lifecycle.
• Perform deeper analysis and correlation across multiple data sources to identify threats and potential lateral movement.
• Collaborate with other teams, including IT, security risk, forensics, and legal, to ensure a coordinated response to incidents.
• Communicate security incidents, findings, and recommendations to management, stakeholders, and relevant parties.

Qualifications

• Strong knowledge of networking, systems, identity, and cloud environments, including investigation and troubleshooting.
• Strong understanding of cybersecurity principles, including threat intelligence, incident response, forensics, vulnerability management, and cyber awareness.
• Practical experience in log analysis, endpoint investigation, and understanding attacker techniques (e.g., lateral movement, persistence, privilege escalation).
• Experience with security tools such as SOAR, SIEM, IDS/IPS, EDR, mail gateway, and other relevant technologies.
• Ability to handle complex incidents in a fast-paced environment and manage multiple tasks simultaneously.
• Excellent proficiency in English. Fluency in additional languages is a strong asset.
• Industry-recognized security certifications, including but not limited to: CISSP, CEH, CISA, GSEC, GCIA, GCIH, GCFA, GCFE, GPEN, GWAPT, GMOB, GREM, GASF, GCTI or equivalent certifications, are a strong asset.