Senior Cybersecurity Analyst (SOC, Incident Response & Threat Hunting)

Axiom Path, Inc.; New York (NY); Remote; USD 110,000 - 150,000; Part time

Job summary

Axiom Path, Inc. seeks a Senior Cybersecurity Analyst to join a remote-aligned New York–based team supporting a global financial services client. You will investigate alerts, perform incident response, and threat hunting across Windows, Linux, AD, and cloud environments.

You will collaborate with specialists in detection engineering, security automation, and digital forensics to strengthen monitoring, reduce false positives, and improve resilience across the enterprise.

Qualifications

• Minimum 4+ years of hands-on cybersecurity experience in SOC/CSIRT/DFIR environments.
• Experience investigating alerts, identifying malicious activity, and supporting containment and remediation.
• Proven understanding of MITRE ATT&CK and Cyber Kill Chain methodologies.
• Hands-on experience with SIEM, EDR, NDR, XDR, or UEBA platforms.
• Knowledge of Windows, Linux, Active Directory, cloud environments, and network security.
• Strong analytical thinking and communication skills.
• Certifications such as GCIH/GNFA/GCFA/CEH/OSCP/CISSP are advantageous but not required.

Responsibilities

• Investigate security alerts and potential incidents to determine severity and business impact.
• Perform detailed incident investigations and support containment and remediation efforts.
• Conduct proactive threat hunting to uncover malicious behavior.
• Analyze attacker TTPs using MITRE ATT&CK and Cyber Kill Chain.
• Work with SIEM, EDR, NDR, XDR, and UEBA technologies to improve visibility and response.
• Identify detection gaps, refine alert logic, and reduce false positives to improve SOC efficiency.
• Partner with Detection Engineering and Security Automation teams to strengthen monitoring.
• Support purple teaming activities and adversary simulations.
• Create and maintain incident response playbooks and documentation.
• Investigate events across Windows, Linux, AD, networks, and cloud environments.

Skills

SOC experience

Incident response

Threat hunting

MITRE ATT&CK

Security monitoring

Analytical thinking

Tools

SIEM

EDR

NDR

XDR

UEBA

Job description

Senior Cybersecurity Analyst (SOC, Incident Response & Threat Hunting)

New York, United States | Posted on 11/06/2026

Axiom Path is an AI-first recruiting and staffing firm delivering RPO, MSP, and direct-hire solutions to enterprise clients across the U.S. Our team of experienced recruiters, supported by purpose-built automation, moves faster and communicates better so clients get qualified talent sooner and candidates get a clear, responsive process from first contact to start date.

Job Description

Be Part Of A High-Performing Team

Join a cybersecurity operations team supporting a global financial services organization committed to protecting critical technology infrastructure, sensitive information, and business operations. Operating in a highly regulated banking environment, this team focuses on strengthening cyber defense capabilities, improving threat visibility, and maintaining operational resilience against evolving security risks.

This opportunity offers the chance to collaborate with experienced security professionals across Security Operations, Cyber Incident Response, Threat Hunting, Detection Engineering, and Security Automation. The team emphasizes investigative excellence, technical collaboration, continuous improvement, and proactive security practices.

What's In Store For You

• Remote Work: Remote position aligned with a New York-based cybersecurity team.
• Engagement: W2 only (no C2C/1099).
• Contract Opportunity: November 30, 2026, through March 31, 2027.
• Work with advanced cybersecurity monitoring, detection, investigation, and response technologies.
• Gain exposure to complex security challenges within a global financial services environment.
• Collaborate with specialists in incident response, digital forensics, threat intelligence, and security automation.
• Contribute to initiatives designed to strengthen security detection accuracy, accelerate incident response, and reduce operational risk.

How You Will Make An Impact

• Investigate security alerts, suspicious activity, and potential cyber incidents to determine severity, root cause, and business impact.
• Perform detailed incident investigations, reconstruct attacker activity, identify compromised systems, and support containment and remediation efforts.
• Conduct proactive threat hunting to uncover malicious behavior that may evade existing security monitoring controls.
• Analyze adversary tactics, techniques, and procedures (TTPs) using MITRE ATT&CK and Cyber Kill Chain frameworks.
• Work with SIEM, EDR, NDR, XDR, and UEBA technologies to improve security visibility and response capabilities.
• Identify detection gaps, refine alert logic, and reduce false positives to improve SOC efficiency and investigation quality.
• Partner with Detection Engineering and Security Automation teams to strengthen monitoring coverage and streamline response workflows.
• Support purple teaming activities and adversary simulations to evaluate existing detection and response effectiveness.
• Create, maintain, and improve security investigation procedures, incident response playbooks, and technical documentation.
• Investigate security events across Windows, Linux, Active Directory, network infrastructure, and cloud environments.
• Support cybersecurity technology enhancements and operational initiatives designed to improve enterprise security resilience.

Requirements

Are You An Experienced SOC and Incident Response Professional Ready to Make an Impact?

• Minimum 4+ years of hands-on cybersecurity experience , preferably within a Security Operations Center (SOC), Computer Security Incident Response Team (CSIRT), or Digital Forensics and Incident Response (DFIR) environment.
• Strong experience investigating cybersecurity alerts, identifying malicious activity, and supporting incident containment and remediation.
• Proven understanding of MITRE ATT&CK, Cyber Kill Chain methodologies, attacker behaviors, and investigative techniques.
• Hands-on experience working with security monitoring and response technologies, including SIEM, EDR, NDR, XDR, or UEBA platforms.
• Working knowledge of Windows, Linux, Active Directory, cloud environments, and enterprise security infrastructure.
• Understanding of network security technologies, including firewalls, proxy servers, email security, and network traffic analysis.
• Experience conducting security investigations, identifying root causes, and developing actionable remediation recommendations.
• Ability to recognize false positives, investigate detection gaps, and collaborate on improvements to security monitoring capabilities.
• Familiarity with proactive threat hunting, digital forensics, detection engineering, or purple teaming activities.
• Strong analytical thinking, troubleshooting skills, and ability to investigate complex security events independently.
• Excellent written and verbal communication skills, including the ability to clearly document technical findings and investigation outcomes.
• Ability to manage multiple security priorities while maintaining accuracy and responsiveness.
• Cybersecurity certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP , or equivalent credentials are advantageous but not required.