Were looking for a hands-on Information Security Analyst to join a Security Operations Center (SOC) environment and help protect enterprise systems, identities, endpoints, networks, and data.This role is best suited for someone who is actively working with the Microsoft security stack today and is comfortable investigating live security events, automating security workflows, and responding to incidents. This is not primarily a governance or policy position. The successful candidate will be a hands-on security practitioner. Top 3 Requirements
- 2+ years of cybersecurity / information security experience
- 2+ years of current, hands-on Microsoft security experience, including Microsoft Defender for Endpoint and/or Microsoft Sentinel
- 2+ years of automation and scripting experience, particularly Python and PowerShell
Preferred: Experience with Microsoft Purview Experience
- 5+ years of Information Technology experience, including at least 2 years in Information Security or Cybersecurity
- Experience working within a SOC or comparable security operations environment, including hands-on alert triage, investigation of active incidents, and use of production security tooling
- Experience analyzing endpoint, identity, network, and security event data to identify and respond to threats
Required Technical Experience
Candidates should have 2+ years of hands-on experience with:
- Microsoft Defender for Endpoint, including alert triage, investigation, and response
- SIEM and SOC operations, including IDS/EDR alert triage, log analysis, and network traffic interpretation using Microsoft Sentinel, Splunk, Kibana, or similar platforms
- Python 3 scripting for security automation, data analysis, and SOC workflow support
- Firewall operations and network security fundamentals
Candidates should also have hands-on experience with:
- Windows and Active Directory
- PowerShell
- Endpoint log analysis
- Group Policy
- Linux system administration
- Digital forensics and incident response at a first-responder level
Preferred Experience
- Microsoft Purview
- Microsoft Entra ID
- AI-assisted security tools, including Microsoft Copilot or AI-enhanced SIEM/security capabilities
- Vulnerability assessment and remediation programs
- Threat hunting and development of detection strategies
What Youll Do SOC Operations & Security Engineering
- Operate, tune, and recommend improvements to SOC monitoring and detection platforms, with particular emphasis on Microsoft Defender and SIEM technologies
- Triage security alerts and investigate potentially malicious activity
- Develop threat-hunting and detection strategies
- Identify additional data sources that can strengthen threat detection and investigation
- Integrate security tools and applications into SOC workflows
- Write Python and PowerShell scripts to automate detection, response, investigation, and data-analysis processes
- Assist with firewall ruleset maintenance and network security controls
Incident Response & Investigation
- Serve as a first responder for cybersecurity incidents
- Perform log, endpoint, and system-level analysis to determine the scope and potential impact of security events
- Support containment, eradication, and recovery activities
- Conduct first-responder digital forensic analysis and preserve relevant evidence
- Clearly document and communicate incident findings to technical and non-technical stakeholders
Vulnerability Management
- Support vulnerability scanning and assessment activities
- Analyze security findings and help prioritize remediation based on exploitability and business impact
- Coordinate remediation with system and application owners
- Track patching and validate remediation of critical vulnerabilities
SOC Development & Mentorship
- Help develop, document, and maintain SOC processes, investigation runbooks, and escalation procedures
- Provide guidance and mentorship to developing security analysts
- Coach team members on alert investigation, log analysis, documentation, and incident-response practices
What Makes Someone Successful in This Role The strongest candidate combines current Microsoft security expertise with hands-on SOC experience. You should be comfortable moving from a Microsoft Defender alert or Sentinel event into an investigation, analyzing multiple data sources, determining risk, documenting findings, and helping drive the appropriate response.Youll also need:
- Strong cross-functional collaboration skills
- Clear written and verbal communication
- Analytical precision across multiple security data sources
- Composure during active security incidents
- Ability to explain technical security findings to both technical and non-technical audiences
- Commitment to continuous technical learning
Job Type & LocationThis is a Contract to Hire position based out of Syracuse, NY. Pay and BenefitsThe pay range for this position is $40.00 - $45.00/hr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits
available for this temporary role may include the following:
Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave) Job Type & LocationThis is a Contract to Hire position based out of Syracuse, NY. Application DeadlineThis position is anticipated to close on Nov 6, 2026. Workplace TypeThis is a hybrid position in Syracuse,NY.
About TEKsystems
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
About TEKsystems and TEKsystems Global Services
Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.