Join a cybersecurity operations team supporting a global financial services organization committed to protecting critical technology infrastructure, sensitive information, and business operations. Operating in a highly regulated banking environment, this team focuses on strengthening cyber defense capabilities, improving threat visibility, and maintaining operational resilience against evolving security risks.
This opportunity offers the chance to collaborate with experienced security professionals across Security Operations, Cyber Incident Response, Threat Hunting, Detection Engineering, and Security Automation. The team emphasizes investigative excellence, technical collaboration, continuous improvement, and proactive security practices.
Remote Work: Remote position aligned with a New York-based cybersecurity team.
Engagement: W2 only (no C2C/1099).
Contract Opportunity: November 30, 2026, through March 31, 2027.
Work with advanced cybersecurity monitoring, detection, investigation, and response technologies.
Gain exposure to complex security challenges within a global financial services environment.
Collaborate with specialists in incident response, digital forensics, threat intelligence, and security automation.
Contribute to initiatives designed to strengthen security detection accuracy, accelerate incident response, and reduce operational risk.
Investigate security alerts, suspicious activity, and potential cyber incidents to determine severity, root cause, and business impact.
Perform detailed incident investigations, reconstruct attacker activity, identify compromised systems, and support containment and remediation efforts.
Conduct proactive threat hunting to uncover malicious behavior that may evade existing security monitoring controls.
Analyze adversary tactics, techniques, and procedures (TTPs) using MITRE ATT&CK and Cyber Kill Chain frameworks.
Work with SIEM, EDR, NDR, XDR, and UEBA technologies to improve security visibility and response capabilities.
Identify detection gaps, refine alert logic, and reduce false positives to improve SOC efficiency and investigation quality.
Partner with Detection Engineering and Security Automation teams to strengthen monitoring coverage and streamline response workflows.
Support purple teaming activities and adversary simulations to evaluate existing detection and response effectiveness.
Create, maintain, and improve security investigation procedures, incident response playbooks, and technical documentation.
Investigate security events across Windows, Linux, Active Directory, network infrastructure, and cloud environments.
Support cybersecurity technology enhancements and operational initiatives designed to improve enterprise security resilience.
Minimum 4+ years of hands-on cybersecurity experience , preferably within a Security Operations Center (SOC), Computer Security Incident Response Team (CSIRT), or Digital Forensics and Incident Response (DFIR) environment.
Strong experience investigating cybersecurity alerts, identifying malicious activity, and supporting incident containment and remediation.
Proven understanding of MITRE ATT&CK, Cyber Kill Chain methodologies, attacker behaviors, and investigative techniques.
Hands-on experience working with security monitoring and response technologies, including SIEM, EDR, NDR, XDR, or UEBA platforms.
Working knowledge of Windows, Linux, Active Directory, cloud environments, and enterprise security infrastructure.
Understanding of network security technologies, including firewalls, proxy servers, email security, and network traffic analysis.
Experience conducting security investigations, identifying root causes, and developing actionable remediation recommendations.
Ability to recognize false positives, investigate detection gaps, and collaborate on improvements to security monitoring capabilities.
Familiarity with proactive threat hunting, digital forensics, detection engineering, or purple teaming activities.
Strong analytical thinking, troubleshooting skills, and ability to investigate complex security events independently.
Excellent written and verbal communication skills, including the ability to clearly document technical findings and investigation outcomes.
Ability to manage multiple security priorities while maintaining accuracy and responsiveness.
Cybersecurity certifications such as GCIH, GNFA, GCFA, CEH, OSCP, CISSP , or equivalent credentials are advantageous but not required.
