Remote SOC Security Analyst – Investigations & Detection

Gartner, Inc.; Irving (TX); On-site; USD 64,000 - 87,000; Full time

Benefits offered by this job

Competitive compensation

401K with corporate match

Health and wellness benefits

Paid time off and holidays

Job summary

Gartner, Inc. is seeking a Security Analyst to strengthen our global Security Operations capability. You will investigate events, support incident response, and improve detection and response across SIEM, EDR, cloud, and email environments.

This hands-on role requires collaboration across time zones and the ability to rotate shifts, including weekends and holidays. You will work with colleagues worldwide, developing automation and playbooks to reduce repetitive work, enhance investigations, and

Qualifications

• Typically, at least two years of experience in information security, security operations, incident response, or an equivalent hands-on role.

Responsibilities

• Investigate security events: Triage and investigate security events and incidents from initial review through containment, remediation and closure, escalating complex or high-impact issues when needed.
• Analyze evidence: Correlate information across SIEM, EDR, cloud, email, proxy, network and supporting telemetry to understand activity, scope and appropriate response actions.
• Communicate clearly: Document investigation notes, summarize findings, and share actionable outcomes with technical teams and business stakeholders.
• Improve detection and response: Contribute to detection content, investigative workflows and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain and other relevant frameworks.
• Build and automate: Help develop practical tools and automation that reduce repetitive work, accelerate investigations, and improve SOC effectiveness.
• Hunt proactively: Identify suspicious behavior, vulnerabilities, control gaps, misconfigurations and anomalous activity across endpoint, network and cloud environments.
• Collaborate effectively: Work with colleagues across multiple geographies to deliver coordinated, timely outcomes and support consistent global operations.
• Support continuous improvement: Contribute practical ideas that improve processes, demonstrate operational excellence, and advance the maturity of the global SOC.

Skills

Security operations

Incident response

Investigation

Communication

Education

Bachelor's degree in cybersecurity

Equivalent practical experience

Certifications (GCIH/GCFA)

Tools

SIEM

XDR

EDR

Web proxy

WAF

CSPM

IDS/NDR

Email security tools

Job description

Gartner, Inc. is seeking a Security Analyst to strengthen our global Security Operations capability. You will investigate events, support incident response, and improve detection and response across SIEM, EDR, cloud, and email environments.

This hands-on role requires collaboration across time zones and the ability to rotate shifts, including weekends and holidays. You will work with colleagues worldwide, developing automation and playbooks to reduce repetitive work, enhance investigations, and