SOC Security Analyst - Microsoft Defender & Automation

TEKsystems; City of Syracuse (NY); Hybrid; USD 55,000 - 62,000; Full time

Job summary

TEKsystems is seeking a hands-on Information Security Analyst to join a Security Operations Center (SOC) environment in Syracuse, NY. The role emphasizes active defense using Microsoft security tools, incident investigation, automation, and response to live events.

Required: 2+ years in cybersecurity, 2+ years with Microsoft Defender for Endpoint/Sentinel, and 2+ years scripting in Python and PowerShell. This is a hybrid role based in Syracuse with compensation reflective of contract-to-hire

Qualifications

• 2+ years of cybersecurity / information security experience.
• 2+ years of current, hands-on Microsoft security experience, including Defender for Endpoint and/or Sentinel.
• 2+ years of automation and scripting experience, particularly Python and PowerShell.

Responsibilities

• Operate, tune, and improve SOC monitoring and detection platforms, focusing on Microsoft Defender and SIEMs.
• Triage security alerts and investigate potentially malicious activity.
• Develop threat-hunting and detection strategies.
• Identify additional data sources to strengthen threat detection and investigation.
• Integrate security tools into SOC workflows and write Python/PowerShell scripts for automation.
• Assist with firewall ruleset maintenance and network security controls.
• Serve as a first responder for cybersecurity incidents; perform logs, endpoint, and system-level analysis.

Skills

Cybersecurity experience

Microsoft security tools

Automation scripting

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

Python

PowerShell

Splunk

Kibana

Job description

TEKsystems is seeking a hands-on Information Security Analyst to join a Security Operations Center (SOC) environment in Syracuse, NY. The role emphasizes active defense using Microsoft security tools, incident investigation, automation, and response to live events.

Required: 2+ years in cybersecurity, 2+ years with Microsoft Defender for Endpoint/Sentinel, and 2+ years scripting in Python and PowerShell. This is a hybrid role based in Syracuse with compensation reflective of contract-to-hire