Cybersecurity Analyst

Position Summary

ITTechnica is partnering with a major Banking & Financial Institution in New York, NY to identify a skilled Cybersecurity Analyst for a contract-to-hire opportunity. This role is critical to protecting the organization's digital assets, customer data, and critical financial infrastructure from evolving cyber threats.

As a Cybersecurity Analyst, you will be responsible for monitoring, detecting, and responding to security incidents across complex enterprise networks. You will leverage industry-leading SIEM tools and security technologies to identify vulnerabilities, conduct penetration testing, and ensure compliance with stringent financial industry regulations. This is a hybrid position based in New York, NY, offering the flexibility of remote work combined with on-site collaboration.

The ideal candidate brings 5+ years of hands-on cybersecurity experience, strong analytical skills, and a deep understanding of threat landscapes specific to the financial services sector. You will work closely with the Security Operations Center (SOC) team, IT infrastructure teams, and senior management to develop and enforce security policies that safeguard the institution against advanced persistent threats, ransomware, and data breaches.

Key Responsibilities

As a Cybersecurity Analyst with our banking client, you will be expected to:

• Monitor and analyze security alerts from SIEM platforms (Splunk, IBM QRadar, or ArcSight) and intrusion detection/prevention systems (IDS/IPS) to identify potential threats, anomalies, and unauthorized access attempts in real time across enterprise-wide networks.
• Conduct incident response activities including threat detection, containment, eradication, and recovery. Lead forensic analysis of security breaches, document findings, and develop comprehensive post-incident reports with recommendations for remediation.
• Perform vulnerability assessments and penetration testing on internal and external network infrastructure, web applications, cloud environments, and mobile platforms using tools such as Nessus, Qualys, Metasploit, and Burp Suite.
• Develop and implement security policies, procedures, and best practices aligned with regulatory requirements including PCI-DSS, SOX, GLBA, and NIST frameworks. Ensure all security controls meet the rigorous standards demanded by the financial services industry.
• Collaborate with cross-functional IT teams including network engineering, application development, and cloud operations to remediate security vulnerabilities, patch systems, and architect defense-in-depth strategies that strengthen the organization's overall security posture.
• Generate comprehensive security reports for management, executive leadership, and regulatory bodies. Provide actionable insights on threat trends, risk assessments, security metrics, and compliance status to support informed decision-making.
• Stay current with emerging cybersecurity threats, attack vectors, vulnerabilities, and defensive technologies. Conduct threat intelligence research, participate in industry information-sharing communities, and continuously improve the organization's detection capabilities.

Required Qualifications

Candidates must meet the following minimum requirements to be considered for this Cybersecurity Analyst position:

• 5+ years of professional experience in cybersecurity or information security roles, with demonstrated expertise in threat detection, incident response, and security operations in enterprise environments.
• Hands-on experience with SIEM tools such as Splunk, IBM QRadar, ArcSight, or Microsoft Sentinel. Ability to create custom dashboards, write correlation rules, and perform advanced threat hunting queries.
• Proficiency in penetration testing and vulnerability assessment methodologies. Experience with tools including Nessus, Qualys, Metasploit, Kali Linux, and Burp Suite for identifying and exploiting security weaknesses.
• Strong knowledge of network security protocols and technologies including firewalls (Palo Alto, Cisco ASA, Fortinet), VPNs, IDS/IPS, DLP, WAF, and network segmentation best practices.
• Familiarity with regulatory compliance frameworks relevant to financial services including PCI-DSS, SOX, GLBA, NIST Cybersecurity Framework, ISO 27001, and SOC 2 Type II requirements.
• Excellent analytical and problem-solving skills with the ability to analyze complex security events, correlate data from multiple sources, and make sound decisions under pressure during active security incidents.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical field. Equivalent combination of education and professional experience will be considered.

Required Certifications

One or more of the following industry-recognized certifications is required for this position:

Preferred Qualifications

Candidates with the following additional qualifications will receive preferential consideration:

• Financial services industry experience — Previous cybersecurity roles in banking, insurance, investment firms, or fintech organizations with exposure to financial regulatory requirements and high-value target environments.
• Advanced certifications such as GIAC (GCIH, GCIA, GSEC), OSCP (Offensive Security Certified Professional), CISM (Certified Information Security Manager), or CCSP (Certified Cloud Security Professional) to complement the required certifications.
• Cloud security expertise — Experience securing AWS, Azure, or GCP environments including cloud-native security tools, IAM policies, cloud compliance, and container security (Docker, Kubernetes).
• Threat intelligence and automation experience — Familiarity with threat intelligence platforms (TIPs), security orchestration and automated response (SOAR) tools, and scripting languages (Python, PowerShell, Bash) for automating security operations.

Benefits & Perks