About the Role
The Security Operations Center (SOC) Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity events and alerts across the organization’s technology environment. This role serves as a frontline defender within the Information Risk Governance Department, identifying potential threats, investigating suspicious activities, and supporting incident response efforts in order to protect the confidentiality, integrity, and availability of organizational assets.
Responsibilities
- Monitor and analyze security events and alerts generated by security systems such as the SIEM, EDR, Firewalls, NAC, NDR, and IDS/IPS systems.
- Triage and analyze security alerts to determine severity, scope, and potential impact and business risk.
- Investigate suspicious system, network, and user activity, escalating potential security incidents to the Incident Response Team and Management as appropriate.
- Maintain awareness of the evolving cybersecurity landscape including emerging threats, attack techniques, vulnerabilities, and indicators of compromise (IoC).
- Conduct proactive threat-hunting activities to identify, investigate, and mitigate emerging threats, anomalous behavior, and potential indicators of compromise that may evade existing security controls.
- Participate as a member of the Incident Response Team during cybersecurity incidents and investigations, documenting findings and collecting evidence.
- Maintain, administer, and tune SIEM and NDR Security tools, optimizing detection rules, use cases, dashboards, reports, and alert configurations.
- Liaise and coordinate with vendors, service providers, and contracts to support security operations and incident response activities.
- Assist with internal and external audits, regulatory examinations, and information security assessments.
- Assist with the evaluation, testing, and comparative analysis of security monitoring and SOC-related technologies.
- Serve as the subject matter expert (SME) for assigned security monitoring and detection platforms.
- Maintain procedures, playbooks, and documentation related to security monitoring and incident response processes.
- Perform other duties and responsibilities as assigned by management.
Requirements
- Bachelor’s degree or equivalent in Information Technology, Cybersecurity/Information Security, or a related field with 3+ years of experience.
- Minimum of three (3) years of experience in cybersecurity, security operations, or a related technical field.
- Strong understanding of security principles, frameworks, and best practices.
- Experience with security monitoring, event analysis, and threat detection technologies.
- Experience with incident investigation and response.
- Excellent communication and problem-solving skills.
- Knowledge of threat intelligence concepts, frameworks, and operational use cases.
- Understanding of Cloud Security principles and controls.
- Strong knowledge of Microsoft Windows Server 2019/2022/2025 and Active Directory environments.
- Strong knowledge of networking protocols, architecture, and security concepts.
- Strong understanding of firewall technologies and security controls.
- Strong understanding and correlation skills of security logs, including Windows Event logs, Active Directory, DNS, proxy, firewall, EDR, and Cloud platform logs.
- Strong knowledge and prior experience with SIEM platforms and security event correlation tools.
- Strong knowledge and prior experience with User and Entity Behavioral Analytics (UEBA) and behavioral analysis tools.
- Working knowledge of Amazon Web Services (AWS) architecture, services, and operations.
- Working knowledge of Linux systems would be a plus.
- Excellent analytical, organization, and multi-tasking skills with strong attention to detail and accuracy.
- Prior experience in the Financial institution or banking industry would be preferred.
Skills
- SIEM
- EDR
- Firewalls
- NAC
- NDR
- IDS/IPS
- Cybersecurity
- Security Operations
- Threat Detection
- Incident Investigation
- Incident Response
- Threat Hunting
- Security Monitoring
- Cloud Security
- Microsoft Windows Server 2019/2022/2025
- Active Directory
- Networking Protocols
- Networking Architecture
- Networking Security
- Firewall Technologies
- Log Correlation
- UEBA
- AWS
Location
- New York City
Work Type
- Hybrid
Experience Level
- Officer level
- 3+ years of experience
Education Level
- Bachelor’s degree or equivalent in Information Technology, Cybersecurity/Information Security, or a related field
Benefits
- Paid Time Off
- Medical
- HSA
- Vision
- Dental
- FSA
- 401(K)
- Profit Sharing
- Legal Plan
- Cancer Indemnity Plan
- Disability Insurance
- Life Insurance
- Employee Assistance Program
- Commuter Benefits
- Business Travel Accident
- Paid Volunteer Day
- Paid Memberships
- Paid Seminars
- Tuition Assistance
About the Company
- SUMITOMO MITSUI TRUST BANK, LIMITED WAS ESTABLISHED THROUGH THE MERGER OF THE SUMITOMO TRUST AND BANKING CO., LTD WITH CHUO MITSUI TRUST AND BANKING, LTD. ON APRIL 1, 2012.
- WE ARE ONE OF THE LARGEST ASSET MANAGERS IN ASIA AND NUMBER ONE AMONG JAPANESE FINANCIAL INSTITUTIONS BY AUM, WITH APPROXIMATELY $850 BILLION USD IN AUM.
- THE BANK PROVIDES AN ASSORTMENT OF FINANCIAL SOLUTIONS AND MANAGES A BROAD SPECTRUM OF FINANCIAL PRODUCTS ACROSS ITS GLOBAL BRANCHES.
- The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities.
- Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions.
- Information Risk Governance (“IRG”) provides oversight to information and cyber security risk by maintaining and improving branch wide framework that is in-line with the Head Office and regulatory requirements and addresses Confidentiality, Integrity, and Availability for information assets.
- IRG establishes appropriate policies, procedures, measurement, and monitoring processes to proactively assess and evaluate and cyber security and information security risks inherent in the Branch Operations.
- IRG is directly involved in all information and cyber security related projects, matters and issues.
Equal Opportunity
- We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.
- SuMi Trust provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law.
- If you need a reasonable accommodation during the application
