Sr Security Analyst (SOC)

Gartner•Irving, TX

18h•Hybrid

About The Position

Gartner is seeking a Senior Security Analyst to strengthen its global Security Operations capability and protect the organization’s people, data, and intellectual property. This hands-on role independently handles complex security investigations, improves detection and response, and serves as a technical escalation point and mentor for other analysts. The analyst works across endpoint, network, cloud, email, and other telemetry, communicates findings to technical teams and business stakeholders, and contributes to improved tools, workflows, and SOC operations. Gartner’s SOC operates 24x7 across multiple time zones. The role requires flexibility to work rotating days, including weekends and holidays, to support continuous coverage and business needs. The position is based near Gartner’s Centers of Excellence in Irving, Texas, or Stamford, Connecticut, in a flexible, hybrid work environment.

Requirements

Three to five years of experience in information security, security operations, incident response, or an equivalent hands-on role.
Proven experience triaging and investigating cybersecurity events and incidents, prioritizing effectively, and working confidently in a time-sensitive environment.
Hands-on experience with SIEM or XDR, EDR, email security, web proxy, and digital forensics and incident response.
Experience investigating AWS, Azure, or GCP environments and working with SPL, KQL, SQL, or comparable query languages.
Practical threat-hunting experience.
Ability to automate using Python, PowerShell, Bash, or similar technologies and identify opportunities to reduce repetitive operational work.
Strong written and verbal communication, documentation, and stakeholder-engagement skills, including the ability to explain technical issues clearly and support other analysts.
Curiosity, continuous learning, and a track record of improving tools, processes, and team capability.

Nice To Haves

A bachelor’s degree in cybersecurity, computer science, engineering, or equivalent practical experience is preferred.
Red-team or purple-team exposure.
Certifications such as GCIH, GCFA, or comparable credentials.

Responsibilities

Independently investigate security incidents from initial triage through scoping, containment, remediation, and closure; escalate high-impact events and coordinate with the Lead Security Analyst when needed.
Correlate evidence across SIEM, EDR, cloud, email, proxy, network, and supporting telemetry to establish root cause, scope, impact, and remediation.
Prepare concise, high-quality investigation notes, incident reports, and actionable outcomes for technical teams and business stakeholders.
Develop and tune detection content, investigative workflows, and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain, and other relevant frameworks.
Build practical tools and automation to reduce repetitive work, accelerate investigations, and improve SOC effectiveness.
Proactively hunt for malicious behavior, vulnerabilities, control gaps, misconfigurations, and anomalous activity across endpoint, network, and cloud environments.
Serve as an escalation point for other analysts, share knowledge, and strengthen the team’s technical and investigative capability.
Contribute ideas that improve processes, demonstrate operational excellence, and advance the maturity of the global SOC.

Benefits

Competitive compensation and an annual bonus plan based on company and individual performance, or a role-based uncapped sales incentive plan, as applicable.
Limitless growth and learning opportunities, including mentorship and apprenticeship, leadership courses, development programs, technical courses, and certification opportunities.
20+ PTO days, plus holidays and floating holidays in the first year.
Medical, dental, and vision insurance.
401(k) with corporate match and immediate vesting; the posting also cites a match of up to $7,200 per year.
Health-and-wellness-related allowance programs.
Parental leave.
Tuition reimbursement.
Employee Stock Purchase Plan, including the opportunity to purchase company stock at a discount.
Employee Assistance Program.
Gartner Gives Charity Match.
Hybrid-work flexibility, including working from home when productive and collaborating with colleagues in offices.