Senior Security Analyst, SOC
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonSQL
Security Analyst
The Health Management Academy
Posted: 10/20/2026AzureCloudPython
Lead Security Analyst – Digital Forensics and Incident Response
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityKubernetesLinuxMacOSPythonSplunk
Senior Security Analyst
Sola
Posted: 10/20/2026AWSFirewallsJavaScriptLinuxNode.jsPython
Senior Security Analyst
Ensono
Posted: 10/20/2026AzureCloudCyber SecurityDNSFirewallsPythonSQLTCP/IP
Cloud Security Analyst
InvestCloud, Inc.
Posted: 10/20/2026AWSAzureCloudFirewallsKubernetesTerraform
IT Security Analyst
DecisionPoint Corporation
Posted: 10/20/2026Cyber Security
Senior Cybersecurity Analyst
Law School Admission Council (LSAC)
Posted: 10/20/2026AzureCloudCyber SecurityFirewallsTCP/IPVault
Lead Analyst – Cyber Security Operations
Hyatt
Posted: 10/20/2026CloudCyber SecurityFirewallsPythonSQLTCP/IP
Analyst, Security Technology
S&P Global
Posted: 10/20/2026
Industrial Security Analyst – Top Secret
Xcelerate Solutions
Posted: 10/20/2026
Security Analyst
AVANT Communications
Posted: 10/20/2026
Security & Network Analyst II
The Jackson Laboratory
Posted: 10/19/2026AWSAzureCloudCyber SecurityDNSFirewallsITSMPythonSQL+2 more
IT Security Analyst
Epicor
Posted: 10/19/2026AWSAzureCloudCyber SecurityDNSLinuxPythonSplunkTCP/IP
Intermediate Cybersecurity Analyst – Splunk
General Dynamics Information Technology
Posted: 10/16/2026CloudCyber SecurityFirewallsMS SQL ServerOracleSplunkSQL
Cybersecurity Analyst II
Frontgrade Technologies
Posted: 10/16/2026Cyber SecurityIoTLinuxPython
Cybersecurity Analyst – AI Focus
GuideWell Source
Posted: 10/16/2026AWSAzureCloudCyber SecurityFirewallsTCP/IP
Principal Security Compliance Analyst – FedRAMP
Entrust
Posted: 10/16/2026Cloud
Senior Information Security Analyst
Planned Parenthood Federation of America
Posted: 10/16/2026CloudCyber Security
Physical Security Analyst
Peraton
Posted: 10/16/2026
Security Analyst Internship
OpenSesame
Posted: 10/16/2026AWSCloud
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in investigating and responding to complex security incidents, utilizing tools and frameworks such as SIEM, EDR, and MITRE ATT&CK. Proficient in automation and threat hunting, with strong communication skills to engage stakeholders effectively.
Highest-signal resume keywords
Incident ResponseThreat HuntingSIEM ExperienceAutomation with PythonCybersecurity Certifications
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Independently investigate complex security incidents from initial triage through scoping, containment, remediation, and closure
- Escalate high-impact events and coordinate with the Lead Security Analyst when needed
- Correlate evidence across SIEM, EDR, cloud, email, proxy, network, and supporting telemetry
- Determine incident root cause, scope, impact, and remediation
- Produce investigation notes, incident reports, and actionable outcomes for technical teams and business stakeholders
- Develop and tune detection content, investigative workflows, and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain, and other frameworks
- Develop tools and automation to reduce repetitive work and accelerate investigations
- Proactively hunt for malicious behavior, vulnerabilities, control gaps, misconfigurations, and anomalous activity
- Act as an escalation point for other analysts and share knowledge
- Contribute ideas that improve processes and advance the maturity of the global SOC
- Support Gartner’s 24x7 SOC and global teams across multiple time zones
Requirements
What you’ll need- Three to five years of experience in information security, security operations, incident response, or an equivalent hands-on role
- Proven experience triaging and investigating cybersecurity events and incidents
- Experience across SIEM or XDR, EDR, email security, web proxy, and digital forensics and incident response
- Experience investigating AWS, Azure, or GCP environments
- Experience with SPL, KQL, SQL, or comparable query languages
- Practical threat-hunting experience
- Ability to automate with Python, PowerShell, Bash, or similar technologies
- Strong written and verbal communication, documentation, and stakeholder engagement skills
- Curiosity, continuous learning, and a track record of improving tools, processes, and team capability
- A bachelor’s degree in cybersecurity, computer science, or engineering, or equivalent practical experience is preferred
- Certifications such as GCIH, GCFA, or comparable credentials are advantageous
- Flexibility to work rotating days, including weekends and holidays
Benefits
Comp & perks- Competitive compensation
- Limitless growth and learning opportunities
- Ongoing mentorship and apprenticeship
- Leadership courses, development programs, technical courses, and certification opportunities
- Collaborative and positive culture
- Flexible working from home and collaboration in dynamic offices
- 20+ PTO days plus holidays and floating holidays in the first year
- Extensive medical, dental insurance, and vision plan
- 401K with corporate match, immediate vesting
- Health-and-wellness-related allowance programs
- Parental leave
- Tuition reimbursement
- Employee Stock Purchase Plan
- Employee Assistance Program
- Gartner Gives Charity Match
- Annual bonus plan based on company and individual performance, or role-based uncapped sales incentive plan
- 401k match up to $7,200 per year
- Opportunity to purchase company stock at a discount
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident InvestigationRoot Cause AnalysisDigital ForensicsQuery Languages (SPL, KQL, SQL)Cloud Security (AWS, Azure, GCP)
Soft Skills
Strong CommunicationDocumentation SkillsStakeholder EngagementCuriosityContinuous Learning
Tools & Technologies
SIEMEDREmail SecurityWeb ProxyAutomation Tools
Certifications & Qualifications
GCIHGCFA
Industry Keywords
CybersecuritySecurity OperationsIncident ResponseSOCMITRE ATT&CK