Senior Cybersecurity Analyst – SOC, Incident Response & Threat Hunting

Axiom Path, Inc.; Florida; Remote; USD 110,000 - 170,000; Full time

Job summary

Axiom Path is recruiting a Senior Cybersecurity Analyst for its global financial services client, focusing on SOC operations, incident response, threat hunting, and proactive security monitoring. You’ll work within a mature Security Operations Center environment, applying advanced security technologies to protect critical banking systems.

The role offers a remote work opportunity with a strong emphasis on collaboration across detection engineering, incident response, and security automation

Qualifications

• 4+ years of professional cybersecurity experience with hands-on SOC operations, incident response, threat hunting, or digital forensics.
• Experience investigating security alerts, analyzing suspicious activity, and responding to incidents.
• Strong understanding of enterprise security monitoring technologies (SIEM/EDR/NDR/XDR/UEBA).
• Familiarity with MITRE ATT&CK framework and cyber kill chain concepts.

Responsibilities

• Investigate cybersecurity alerts and determine threats, assess severity, identify root causes, and coordinate responses.
• Perform detailed incident investigations, analyze attacker behavior, identify compromised assets, and reconstruct events.
• Conduct proactive threat hunting across enterprise systems to detect suspicious activity.
• Apply MITRE ATT&CK and kill chain concepts to assess adversary techniques.
• Leverage SIEM/EDR/NDR/XDR and analytics to improve detection and response.

Skills

SOC operations

Incident response

Threat hunting

Digital forensics

MITRE ATT&CK

Tools

SIEM

EDR

NDR

XDR

UEBA

Job description

Senior Cybersecurity Analyst – SOC, Incident Response & Threat Hunting

Charlotte, United States | Posted on 10/22/2026

Axiom Path is an AI-first recruiting and staffing firm delivering RPO, MSP, and direct-hire solutions to enterprise clients across the U.S. Our team of experienced recruiters, supported by purpose-built automation, moves faster and communicates better so clients get qualified talent sooner and candidates get a clear, responsive process from first contact to start date.

Job Description

Be Part Of A High-Performing Team

Join a global financial services technology organization dedicated to protecting critical banking systems, sensitive information, and enterprise infrastructure against evolving cyber threats. The organization operates in a highly regulated environment where cybersecurity, operational resilience, and continuous improvement are essential to business success.

This opportunity sits within an established Security Operations Center (SOC), working alongside cybersecurity specialists focused on threat detection, incident response, digital forensics, and proactive security operations. The team emphasizes technical investigation, collaboration, and innovation, leveraging advanced security technologies to strengthen defenses and improve the effectiveness of enterprise security monitoring.

What's In Store For You

Remote work opportunity supporting enterprise cybersecurity operations.

Engagement: W2 only (no C2C/1099).

Work with an experienced SOC team responsible for protecting a complex financial services environment.

Gain exposure to advanced security monitoring, threat hunting, incident response, and security automation technologies.

Collaborate with specialists across detection engineering, incident response, and security automation.

Contribute to continuous improvements in cybersecurity processes, detection capabilities, and operational efficiency.

How You Will Make An Impact

Investigate cybersecurity alerts and suspicious activity to determine potential threats, assess severity, identify root causes, and coordinate appropriate responses.

Perform detailed incident investigations, including analyzing attacker behavior, identifying compromised assets, and reconstructing security events.

Conduct proactive threat hunting across enterprise systems to identify suspicious behavior that may have bypassed existing security controls.

Apply the MITRE ATT&CK framework and cyber kill chain concepts to analyze adversary tactics, techniques, and procedures (TTPs).

Leverage SIEM, EDR, NDR, XDR, and behavioral analytics technologies to investigate threats and improve detection effectiveness.

Partner with detection engineering teams to identify monitoring gaps, reduce false positives, and enhance security alerting capabilities.

Collaborate with security automation specialists to streamline repetitive investigation and response activities.

Support digital forensic investigations and contribute technical findings during cybersecurity incidents.

Develop, maintain, and improve SOC investigation procedures, incident response playbooks, and operational documentation.

Evaluate emerging attack techniques and assess the organization's ability to detect and respond to them.

Analyze security activity across Windows, Linux, Active Directory, cloud environments, and enterprise networks.

Contribute to security initiatives that improve operational resilience, response efficiency, and overall cybersecurity maturity.

Requirements

Are You An Experienced SOC And Incident Response Professional Ready To Make An Impact?

4+ years of professional cybersecurity experience , preferably involving hands-on SOC operations, incident response, threat hunting, or digital forensics. Candidates with 5–7 years of relevant experience are particularly aligned with the role.

Demonstrated experience investigating security alerts, analyzing suspicious activity, and responding to cybersecurity incidents.

Strong understanding of enterprise security monitoring technologies, including SIEM, EDR, NDR, XDR, and UEBA.

Working knowledge of the MITRE ATT&CK framework, cyber kill chain methodology, and common attacker techniques.

Experience investigating security events involving Windows, Linux, Active Directory, and cloud technologies.

Knowledge of network security concepts, including firewalls, proxy servers, email security, and network traffic analysis.

Ability to distinguish genuine security threats from false positives and recommend improvements to detection logic.

Familiarity with threat hunting methodologies, digital forensics, and incident response procedures.

Strong analytical and troubleshooting skills with the ability to investigate complex technical issues independently.

Excellent written and verbal communication skills, particularly when documenting investigations and communicating technical findings.

Ability to prioritize competing incidents and responsibilities in a fast-paced security operations environment.

Self-motivated, detail-oriented, and committed to continuous learning and cybersecurity improvement.

Professional certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP, or comparable credentials are advantageous but not required.