Senior SOC Analyst - Cloud & Threat Detection (Remote)

New-York-Life; New York (NY); Hybrid; USD 100,000 - 143,000; Full time

Benefits offered by this job

Discretionary bonus

Benefits package

Job summary

New York Life is seeking a Security Operations Center (SOC) Analyst to monitor, detect, investigate, and respond to cyber threats across hybrid and cloud environments. This role uses SIEM and EDR/XDR tools to protect our enterprise technology landscape and collaborate with cross‑functional teams.

You will develop incident response playbooks, conduct threat hunting, and contribute to continuous security improvements by sharing insights with security engineering, cloud, and infrastructure teams.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field with 3–4 years of Security Operations experience.
• Hands-on experience securing cloud environments (AWS/GCP) and familiarity with cloud-native security services.
• Experience using SIEM/EDR platforms and strong incident investigation and documentation skills.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents across cloud and on-premises environments.
• Perform threat hunting, malware analysis, and incident investigations while documenting findings.
• Analyze telemetry from cloud platforms (AWS, GCP) to identify indicators of compromise and strengthen controls.
• Develop and maintain incident response playbooks and runbooks, participate in tabletop exercises.
• Collaborate with security engineering, cloud platform, and infrastructure teams to improve posture.

Skills

SOC Analyst

Incident Response

Threat Hunting

Cloud Security

SIEM/EDR

Python/Automation

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Elastic

Splunk

Google Chronicle

CrowdStrike Falcon

Cortex XDR

AWS GuardDuty

AWS Security Hub

Job description

New York Life is seeking a Security Operations Center (SOC) Analyst to monitor, detect, investigate, and respond to cyber threats across hybrid and cloud environments. This role uses SIEM and EDR/XDR tools to protect our enterprise technology landscape and collaborate with cross‑functional teams.

You will develop incident response playbooks, conduct threat hunting, and contribute to continuous security improvements by sharing insights with security engineering, cloud, and infrastructure teams.