# Security Analyst (SOC) at Gartner

Gartner is hiring a Security Analyst (SOC). It pays $64k-$87k a year and Level rates it Little AI ●○○○; you can [apply on Gartner](https://jobsbylevel.com/go/26e90387-7315-4751-b6e2-7c13930b25ce?utm_medium=ai-agent).

AI Level 1, AI centrality 37 out of 100. Irving, TX.

## Details

- Company: [Gartner](https://jobsbylevel.com/companies/gartner)
- AI level: AI Level 1 (score 37 out of 100)
- Location: Irving, TX
- Salary: $64k-$87k
- Posted: October 20, 2026
- Apply: https://jobsbylevel.com/go/26e90387-7315-4751-b6e2-7c13930b25ce?utm_medium=ai-agent

## Description

Hiring near our Irving, TX and Stamford, CT Centers of Excellence with a flexible environment. About Gartner Information Security Gartner Information Security enables the business to move quickly and confidently by protecting our people, data, and ideas. We are a global team of defenders, investigators, engineers, and lifelong learners who solve complex security challenges together. You will join an inclusive, security-first culture where expertise is shared, thoughtful challenge is encouraged, and strong ideas can come from anyone. If you are curious, practical, and motivated to strengthen the security posture of a global organization, you will have the opportunity to make a visible impact here. About the role We are seeking a Security Analyst to help strengthen our global Security Operations capability. You will investigate security events, support incident response, improve detection and response, and help protect Gartner’s people, data, and intellectual property. This is a hands-on role for someone who combines technical curiosity with sound judgement, clear communication, and a drive to improve how a global SOC operates. You will be an investigator, a collaborative teammate, and a contributor to better ways to detect, investigate, and respond. Gartner’s SOC operates 24x7 to support global teams across multiple time zones. This role requires the flexibility to work on rotating days, including weekends and holidays, to ensure continuous coverage and meet business needs. What you will do Investigate security events: Triage and investigate security events and incidents from initial review through containment, remediation and closure, escalating complex or high-impact issues when needed. Analyze evidence: Correlate information across SIEM, EDR, cloud, email, proxy, network and supporting telemetry to understand activity, scope and appropriate response actions. Communicate clearly: Document investigation notes, summarize findings, and share actionable outcomes with technical teams and business stakeholders. Improve detection and response: Contribute to detection content, investigative workflows and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain and other relevant frameworks. Build and automate: Help develop practical tools and automation that reduce repetitive work, accelerate investigations, and improve SOC effectiveness. Hunt proactively: Identify suspicious behavior, vulnerabilities, control gaps, misconfigurations and anomalous activity across endpoint, network and cloud environments. Collaborate effectively: Work with colleagues across multiple geographies to deliver coordinated, timely outcomes and support consistent global operations. Support continuous improvement: Contribute practical ideas that improve processes, demonstrate operational excellence, and advance the maturity of the global SOC. What you will bring Relevant experience: Typically, at least two years of experience in information security, security operations, incident response, or an equivalent hands-on role. Investigation capability: Experience triaging and investigating cybersecurity events and incidents, prioritizing effectively and working confidently in a time-sensitive operational environment. Technical foundation: Hands-on experience using SIEM or XDR platforms for log analysis, alert investigation and detection development. Security tooling: Working knowledge of technologies such as EDR, web proxy, WAF, CSPM, IDS/NDR and email security tools. Cloud and data skills: Exposure to AWS, Azure or GCP environments and the ability to query data using SPL, SQL, KQL or comparable languages. Automation mindset: Interest in automating repetitive work with Python, PowerShell, Bash or similar technologies. Communication and collaboration: Clear communication, sound prioritization, and the ability to work proactively with teammates and stakeholders. Growth mindset: Curiosity, continuous learning and an improvement-focused approach to tools, processes

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/security-analyst-soc-at-gartner-f74804

Source: https://jobsbylevel.com/jobs/security-analyst-soc-at-gartner-f74804

## Cite this page

Level. https://jobsbylevel.com/jobs/security-analyst-soc-at-gartner-f74804.

Get job alerts: https://jobsbylevel.com/newsletter