Security Analyst (SOC)

Gartner•Irving, TX

1d•Hybrid

About The Position

Gartner Information Security is seeking a hands-on Security Analyst to strengthen its global Security Operations capability. The role investigates security events, supports incident response, improves detection and response, and helps protect Gartner’s people, data, and intellectual property. It calls for technical curiosity, sound judgment, clear communication, and a focus on improving global SOC operations. Gartner’s SOC operates 24x7 across multiple time zones. The position requires flexibility to work rotating days, including weekends and holidays, to maintain continuous coverage and meet business needs. The role is based near Gartner’s Irving, Texas, or Stamford, Connecticut, Centers of Excellence in a hybrid environment.

Requirements

Typically, at least two years of experience in information security, security operations, incident response, or an equivalent hands-on role.
Experience triaging and investigating cybersecurity events and incidents, prioritizing effectively, and working confidently in a time-sensitive operational environment.
Hands-on experience using SIEM or XDR platforms for log analysis, alert investigation, and detection development.
Working knowledge of technologies such as EDR, web proxy, WAF, CSPM, IDS/NDR, and email security tools.
Exposure to AWS, Azure, or GCP environments and the ability to query data using SPL, SQL, KQL, or comparable languages.
Clear communication, sound prioritization, and the ability to work proactively with teammates and stakeholders.
Curiosity, continuous learning, and an improvement-focused approach to tools, processes, and team outcomes.
Flexibility to work rotating days, including weekends and holidays.

Nice To Haves

A bachelor’s degree in cybersecurity, computer science, engineering, or equivalent practical experience is preferred.
Certifications such as GCIH, GCFA, or comparable credentials are advantageous.
Interest in automating repetitive work with Python, PowerShell, Bash, or similar technologies.

Responsibilities

Triage and investigate security events and incidents from initial review through containment, remediation, and closure, escalating complex or high-impact issues when needed.
Correlate information across SIEM, EDR, cloud, email, proxy, network, and supporting telemetry to determine activity, scope, and appropriate response actions.
Document investigation notes, summarize findings, and share actionable outcomes with technical teams and business stakeholders.
Contribute to detection content, investigative workflows, and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain, and other relevant frameworks.
Help develop tools and automation to reduce repetitive work, accelerate investigations, and improve SOC effectiveness.
Proactively identify suspicious behavior, vulnerabilities, control gaps, misconfigurations, and anomalous activity across endpoint, network, and cloud environments.
Collaborate with colleagues across multiple geographies to deliver coordinated, timely outcomes and support consistent global operations.
Contribute practical ideas that improve processes, demonstrate operational excellence, and advance the maturity of the global SOC.

Benefits

Competitive compensation
Limitless growth and learning opportunities
Mentorship and apprenticeship
Leadership courses, development programs, technical courses, and certification opportunities
20+ PTO days plus holidays and floating holidays in the first year
Medical, dental, and vision insurance
401(k) with corporate match and immediate vesting
Health-and-wellness-related allowance programs
Parental leave
Tuition reimbursement
Employee Stock Purchase Plan
Employee Assistance Program
Gartner Gives Charity Match
Annual bonus plan based on company and individual performance, or a role-based, uncapped sales incentive plan, as applicable
401(k) match up to $7,200 per year
Opportunity to purchase company stock at a discount