Security Analyst (SOC)

Gartner•Stamford, CT

2d•$64,000 - $87,000•Hybrid

About The Position

Gartner is seeking a Security Analyst to strengthen its global Security Operations capability. The role investigates security events, supports incident response, improves detection and response, and helps protect Gartner’s people, data, and intellectual property. It combines hands-on investigation with technical curiosity, sound judgment, clear communication, and continuous improvement of global SOC operations. Gartner’s SOC operates 24x7 across multiple time zones. The role requires flexibility to work rotating days, including weekends and holidays, to provide continuous coverage and meet business needs. The position is based near Gartner’s Irving, Texas or Stamford, Connecticut Centers of Excellence, with a flexible hybrid environment. The analyst will work across SIEM, EDR, cloud, email, proxy, network, and supporting telemetry; contribute to detection content, workflows, playbooks, and automation; proactively hunt for suspicious activity and security gaps; and collaborate with colleagues and stakeholders across geographies. The role offers opportunities to take ownership of investigations, improve SOC maturity, and develop through mentorship, learning, and collaboration.

Requirements

Typically at least two years of experience in information security, security operations, incident response, or an equivalent hands-on role.
Experience triaging and investigating cybersecurity events and incidents, prioritizing effectively, and working confidently in a time-sensitive operational environment.
Hands-on experience using SIEM or XDR platforms for log analysis, alert investigation, and detection development.
Working knowledge of technologies such as EDR, web proxy, WAF, CSPM, IDS/NDR, and email security tools.
Exposure to AWS, Azure, or GCP environments and ability to query data using SPL, SQL, KQL, or comparable languages.
Interest in automating repetitive work with Python, PowerShell, Bash, or similar technologies.
Clear communication, sound prioritization, and ability to work proactively with teammates and stakeholders.
Curiosity, continuous learning, and an improvement-focused approach to tools, processes, and team outcomes.
Flexibility to work rotating days, including weekends and holidays, to support continuous SOC coverage.

Nice To Haves

A bachelor’s degree in cybersecurity, computer science, engineering, or equivalent practical experience is preferred.
Certifications such as GCIH, GCFA, or comparable credentials are advantageous.

Responsibilities

Triage and investigate security events and incidents from initial review through containment, remediation, and closure, escalating complex or high-impact issues when needed.
Correlate information across SIEM, EDR, cloud, email, proxy, network, and supporting telemetry to understand activity, scope, and appropriate response actions.
Document investigation notes, summarize findings, and communicate actionable outcomes to technical teams and business stakeholders.
Contribute to detection content, investigative workflows, and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain, and other relevant frameworks.
Help develop practical tools and automation to reduce repetitive work, accelerate investigations, and improve SOC effectiveness.
Proactively identify suspicious behavior, vulnerabilities, control gaps, misconfigurations, and anomalous activity across endpoint, network, and cloud environments.
Collaborate with colleagues across multiple geographies to deliver coordinated, timely outcomes and support consistent global operations.
Contribute practical ideas to improve processes, demonstrate operational excellence, and advance the maturity of the global SOC.

Benefits

Competitive compensation and participation in an annual bonus plan based on company and individual performance, or an eligible role-based sales incentive plan.
Limitless growth and learning opportunities, including mentorship, apprenticeship, leadership courses, development programs, technical courses, and certification opportunities.
20+ PTO days plus holidays and floating holidays in the first year.
Medical, dental, and vision insurance.
401(k) with corporate match and immediate vesting; the posting also states a match of up to $7,200 per year.
Health-and-wellness-related allowance programs.
Parental leave.
Tuition reimbursement.
Employee Stock Purchase Plan, including the opportunity to purchase company stock at a discount.
Employee Assistance Program.
Gartner Gives Charity Match.
Flexible hybrid work environment, including working from home and collaborating with colleagues in offices.