Senior SOC Analyst- Tuesday- Saturday

BNY; Pittsburgh (Allegheny County); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

401(k) plan

Medical insurance

Dental insurance

Paid time off

Volunteer time off

Job summary

BNY is seeking a Senior SOC Analyst to join the Security Operations Center, in Pittsburgh or Lake Mary. The role involves leading triage, root-cause analysis, and coordinated incident response, with a focus on detection tuning and playbook development.

You’ll collaborate with Threat Intelligence and Engineering, mentor junior staff, and maintain audit-ready investigations aligned with regulatory requirements. Schedule Tue–Sat, ET work hours, hybrid/local coverage.

Qualifications

• 6–10 years in a SOC, incident response or threat detection role.
• Bachelor’s degree in Information Security, CS, or related field; CISSP/CISM preferred.
• Advanced proficiency with SIEM/EDR/SOAR platforms.
• Strong knowledge of networks, Windows/Linux, identity systems and cloud logs.
• Experience with MITRE ATT&CK, threat hunting, IOC/IOA development, tuning.
• Proven ability to lead incidents, coordinate stakeholders, and communicate under pressure.
• Scripting/automation experience (Python, PowerShell).
• Familiarity with NIST CSF/800-61, CIS Controls and regulatory requirements.
• Excellent documentation and evidence-driven investigation approach.

Responsibilities

• Lead triage and investigation of security alerts, escalating and coordinating incident response as needed.
• Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery.
• Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms to identify true positives and reduce false positives.
• Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework.
• Mentor junior analysts and provide guidance on investigation techniques, documentation standards, and operational best practices.
• Coordinate with Threat Intelligence to enrich investigations, track adversary TTPs, and proactively hunt for indicators of compromise.

Skills

SOC experience

Incident response

MITRE ATT&CK

Python

PowerShell

SIEM/EDR/SOAR

Documentation

NIST CSF

Education

Bachelor's in Info Sec/CS

CISSP / CISM preferred

Tools

Splunk

QRadar

Sentinel

CrowdStrike

Microsoft Defender

ServiceNow

Job description

Job Description

We’re seeking a future team member for the role of Senior SOC Analyst to join our Security Operations Center team. This role can be in Pittsburgh PA or Lake Mary FL. Schedule: Tuesday–Saturday.

Key Responsibilities

• Lead triage and investigation of security alerts, escalating and coordinating incident response as needed.
• Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery.
• Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms to identify true positives and reduce false positives.
• Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework.
• Mentor junior analysts and provide guidance on investigation techniques, documentation standards, and operational best practices.
• Coordinate with Threat Intelligence to enrich investigations, track adversary TTPs, and proactively hunt for indicators of compromise.
• Partner with Engineering teams to tune detections, improve log fidelity, and strengthen preventive controls.
• Create clear, actionable incident reports and executive summaries; contribute to metrics and trend analysis.
• Support purple team exercises and post-incident reviews to capture lessons learned and drive continuous improvement.
• Ensure adherence to regulatory and security policies; maintain audit-ready documentation for investigations and incidents.

Qualifications

• 6-10; years of experience in a SOC, incident response, or threat detection role, including Tier 2/3 investigations.
• Bachelor's degree in Information Security, Computer Science, or a related field - Advanced certifications such as CISSP or CISM are preferred
• Advanced proficiency with SIEM (e.g., Splunk, QRadar, Sentinel), EDR (e.g., CrowdStrike, Microsoft Defender), and SOAR platforms.
• Strong knowledge of network security, Windows/Linux, identity systems, and common cloud logging sources.
• Hands-on experience with the MITRE ATT&CK framework, threat hunting, IOC/IOA development, and detection tuning.
• Demonstrated ability to lead complex incidents, coordinate stakeholders, and communicate clearly under time pressure.
• Scripting or automation experience (e.g., Python, PowerShell) for investigation enrichment and workflow improvements.
• Familiarity with NIST CSF/800-61, CIS Controls, and common regulatory requirements impacting incident response.
• Excellent documentation skills and an evidence-driven approach to investigations.

Preferred Qualifications

• Relevant certifications: GCIA, GCED, GCIH, GCFA, GNFA, CISSP, CCSP, or equivalent experience.
• Experience with ticketing and case management systems (e.g., ServiceNow) and knowledge management practices.
• Prior experience with threat intel platforms, sandboxing tools, and malware triage is a plus.

Work Schedule

• This role is scheduled Tuesday–Saturday, 8:00 AM -4 PM Eastern Time to support operational coverage.
• Occasional flexibility may be required during major incidents or planned exercises.

About Us

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what is all about. Join us and be part of something extraordinary.

About The Team

At BNY, our culture speaks for itself, check out the latest BNY news at BNY Newsroom & BNY LinkedIn

Here’s a Few Of Our Recent Awards

• America’s Most Innovative Companies, Fortune, 2025
• World’s Most Admired Companies, Fortune 2025
• “Most Just Companies”, Just Capital and CNBC, 2025

Our Benefits And Rewards

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

BNY assesses market data to ensure a competitive compensation package for our employees. The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting.

Base salary offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Subject to the terms and conditions of the applicable plans then in effect, eligible employees may enroll in a 401(k) plan as well as participate in Company-sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee’s eligible dependents. Eligible employees also may receive other benefits (including various paid time off benefits, such as vacation and sick time), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, the employee will be in an “at will” position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.