Security Analyst (SOC)

Gartner; Dolphin Cove (CT); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Flexible environment

Global SOC exposure

Mentorship programs

Professional development

Work from home flexibility

Job summary

Gartner Information Security is seeking a Security Analyst to strengthen our global SOC. You will investigate events, support incident response, improve detection, and help protect our people, data, and intellectual property.

Our SOC operates 24x7 across time zones; expect rotating shifts including weekends and holidays to maintain coverage and meet business needs.

Qualifications

• Typically at least two years of information security or security operations experience.
• Experience triaging and investigating cybersecurity events in time-sensitive environments.
• Hands-on use of SIEM or XDR for log analysis and detection development.
• Knowledge of EDR, proxies, WAF, CSPM, IDS/NDR and email security tools.
• Exposure to AWS/Azure/GCP and ability to query data with SPL/SQL/KQL.
• Automation experience with Python, PowerShell or Bash.
• Strong communication and collaboration skills; willingness to learn.
• Bachelor-level degree preferred; certifications like GCIH/GCFA advantageous.

Responsibilities

• Investigate security events from initial review through containment and closure.
• Correlate information across SIEM, EDR, cloud, and network telemetry to determine response.
• Document investigation notes and share outcomes with technical teams and stakeholders.
• Contribute to detection content, workflows, and playbooks aligned with MITRE ATT&CK.
• Develop practical tools and automation to reduce repetitive work and improve SOC efficiency.
• Proactively hunt for suspicious behavior and control gaps across endpoints and networks.
• Collaborate with colleagues across geographies to deliver timely, coordinated outcomes.
• Support continuous improvement and maturity of Gartner's global SOC.

Skills

Incident response

Automation mindset

Communication

Security tooling

Cloud data skills

Query languages

Scripting

Education

Bachelor's in cybersecurity / CS / engineering

Tools

SIEM/XDR

EDR

Web proxy

WAF

CSPM

IDS/NDR

Email security tools

Job description

Hiring near our Irving, TX and Stamford, CT Centers of Excellence with a flexible environment.

About Gartner Information Security

Gartner Information Security enables the business to move quickly and confidently by protecting our people, data, and ideas. We are a global team of defenders, investigators, engineers, and lifelong learners who solve complex security challenges together.

You will join an inclusive, security-first culture where expertise is shared, thoughtful challenge is encouraged, and strong ideas can come from anyone. If you are curious, practical, and motivated to strengthen the security posture of a global organization, you will have the opportunity to make a visible impact here.

About the role

We are seeking a Security Analyst to help strengthen our global Security Operations capability. You will investigate security events, support incident response, improve detection and response, and help protect Gartner's people, data, and intellectual property.

Gartner's SOC operates 24x7 to support global teams across multiple time zones. This role requires the flexibility to work on rotating days, including weekends and holidays, to ensure continuous coverage and meet business needs.

What you will do

• Investigate security events: Triage and investigate security events and incidents from initial review through containment, remediation and closure, escalating complex or high-impact issues when needed.


• Analyze evidence: Correlate information across SIEM, EDR, cloud, email, proxy, network and supporting telemetry to understand activity, scope and appropriate response actions.


• Communicate clearly: Document investigation notes, summarize findings, and share actionable outcomes with technical teams and business stakeholders.


• Improve detection and response: Contribute to detection content, investigative workflows and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain and other relevant frameworks.


• Build and automate: Help develop practical tools and automation that reduce repetitive work, accelerate investigations, and improve SOC effectiveness.


• Hunt proactively: Identify suspicious behavior, vulnerabilities, control gaps, misconfigurations and anomalous activity across endpoint, network and cloud environments.


• Collaborate effectively: Work with colleagues across multiple geographies to deliver coordinated, timely outcomes and support consistent global operations.


• Support continuous improvement: Contribute practical ideas that improve processes, demonstrate operational excellence, and advance the maturity of the global SOC.

What you will bring

• Relevant experience: Typically, at least two years of experience in information security, security operations, incident response, or an equivalent hands-on role.


• Investigation capability: Experience triaging and investigating cybersecurity events and incidents, prioritizing effectively and working confidently in a time-sensitive operational environment.


• Technical foundation: Hands-on experience using SIEM or XDR platforms for log analysis, alert investigation and detection development.


• Security tooling: Working knowledge of technologies such as EDR, web proxy, WAF, CSPM, IDS/NDR and email security tools.


• Cloud and data skills: Exposure to AWS, Azure or GCP environments and the ability to query data using SPL, SQL, KQL or comparable languages.


• Automation mindset: Interest in automating repetitive work with Python, PowerShell, Bash or similar technologies.


• Communication and collaboration: Clear communication, sound prioritization, and the ability to work proactively with teammates and stakeholders.


• Growth mindset: Curiosity, continuous learning and an improvement-focused approach to tools, processes and team outcomes.


• Training and Certifications: A bachelor's degree in cybersecurity, computer science, engineering or equivalent practical experience is preferred. Certifications such as GCIH, GCFA, or comparable credentials are advantageous.

What you will love about working here

• Visible impact: Help strengthen the maturity of a global SOC while protecting a business that operates on a worldwide scale.


• Meaningful ownership: Take responsibility for important investigations, influence outcomes and see strong ideas move from concept to implementation.


• Modern security challenges: Work across diverse technologies and environments, supported by tools and investment that enable you to do your best work.


• Growth through collaboration: Learn with skilled colleagues who value curiosity, knowledge sharing, thoughtful challenges, and continuous improvement.


• Autonomy with support: Have the freedom to improve how we work, backed by a global team committed to shared success.

What you will get

• Competitive compensation.


• Limitless growth and learning opportunities.


• Ongoing mentorship and apprenticeship; Leadership courses, development programs, technical courses, certification opportunities and more!


• A collaborative and positive culture - join a diverse team of professionals that are as smart and driven as you.


• A chance to make an impact - your work will contribute directly to our strategy.


• Enjoy the flexibility of working from home and the energy of collaborating with peers in our dynamic offices.


• 20+ PTO days plus holidays and floating holidays in your first year.


• Extensive medical, dental insurance and vision plan.


• 401K with corporate match, immediate vesting.


• Health-and-wellness-related allowance programs.


• Parental leave.


• Tuition reimbursement.


• Employee Stock Purchase Plan.


• Employee Assistance Program.


• Gartner Gives Charity Match. And much more!

Who are we?

At Gartner, Inc. (NYSE:IT), we guide the leaders who shape the world.

Our mission relies on expert analysis and bold ideas to deliver actionable, objective business and technology insights, helping enterprise leaders and their teams succeed with their mission-critical priorities.

Since our founding in 1979, we've grown to 20,000 associates globally who support over 13,000 client enterprises in ~90 countries and territories. We do important, interesting and substantive work that matters. That's why