security operations analyst

WENCOR

<div>
 For 68 years, HEICO Corporation, a NYSE traded company, has thrived by serving niche segments of the aviation, defense, space and electronics industries by providing innovative and cost-saving products and services. HEICO&rsquo;s high-energy culture focuses our Team Members on providing high quality products and services to our customer base, which is made up of most of the world&rsquo;s airlines, the defense industry, satellite manufacturers and other electronics companies. Our leadership approach creates a dynamic environment that continually challenges our Team Members to grow professionally and develop in an entrepreneurially-spirited setting.
 <br/>
 <br/>
 <strong>
  ROLE:
 </strong>
 The
 <strong>
  Senior IT Security Analyst
 </strong>
 applies advanced systems analysis techniques and deep cybersecurity operations expertise to protect sensitive and mission-critical systems across HEICO and its subsidiaries. This role serves as a senior technical escalation point for security monitoring and incident response, leads complex investigations, and drives continuous improvement of detection, response, and security hardening capabilities.
 <br/>
 <br/>
 The Senior IT Security Analyst acts as a trusted advisor and liaison to ensure security operations align with HEICO standards while accounting for subsidiary-specific business needs and technical nuances. The role mentors junior analysts, improves operational rigor (playbooks, automation, metrics), and supports compliance-driven security requirements through disciplined execution and documentation.
 <br/>
 <br/>
 <strong>
  Essential Duties And Responsibilities
  <br/>
  <br/>
 </strong>
 <li>
  Security Monitoring &amp; Triage
 </li>
 <ul>
  <li>
   Analyze and triage security alerts from managed detection and response (MDR) services and internal monitoring platforms; determine severity, scope, and required actions.
  </li>
  <li>
   Serve as an escalation point for high-impact or complex alerts and investigations; provide guidance to junior analysts during active cases.
  </li>
 </ul>
 <li>
  Incident Response Leadership
 </li>
 <ul>
  <li>
   Lead cybersecurity incident investigations, including evidence preservation, containment, eradication, and recovery validation in accordance with established procedures.
  </li>
  <li>
   Coordinate incident communications and technical actions across IT teams, impacted sites, and third-party providers; ensure timely escalation when elevated authorization is required.
  </li>
  <li>
   Perform post-incident reviews, document timelines and lessons learned, and implement improvements to reduce recurrence.
  </li>
 </ul>
 <li>
  Threat Investigation &amp; Analysis
 </li>
 <ul>
  <li>
   Conduct malware and suspicious artifact analysis using investigative tooling (including sandboxing) to determine behavior, impact, and mitigation steps.
  </li>
  <li>
   Perform proactive threat hunting to identify stealthy or low-signal adversary activity and improve detection coverage.
  </li>
 </ul>
 <li>
  Detection Engineering &amp; Security Tool Optimization
 </li>
 <ul>
  <li>
   Evaluate, tune, and optimize EDR/XDR detection logic, response policies, and automated containment actions to improve efficacy and reduce false positives.
  </li>
  <li>
   Enhance alert fidelity and investigative effectiveness through rule refinement, contextual enrichment, telemetry validation, and playbook improvements.
  </li>
  <li>
   Design and maintain application control and endpoint protection policies to strengthen visibility, restrict unauthorized software execution, and address detection or response gaps.
  </li>
  <li>
   Security Automation
  </li>
  <ul>
   <li>
    Develop, test, and implement SOAR/security automation workflows to improve response consistency and enable action when staffing is limited.
   </li>
   <li>
    Identify repetitive analyst tasks and implement automation to increase operational capacity and reduce mean time to respond (MTTR).
   </li>
  </ul>
  <li>
   Incident-Driven Vulnerability Escalation
  </li>
  <ul>
   <li>
    Escalate vulnerabilities or control weaknesses identified during incident response or threat hunting, providing technical impact analysis and attack-path context to the vulnerability management function.
   </li>
   <li>
    Confirm that remediation actions adequately address the specific incident vector or exploited control gap.
   </li>
  </ul>
  <li>
   Control Gap Identification &amp; Advisory
  </li>
  <ul>
   <li>
    Provide operational feedback on control effectiveness based on real-world incident activity and detection gaps (including emerging technology guidance such as AI usage controls).
   </li>
   <li>
    Recommend improvements to technical safeguards or enforcement mechanisms when investigative findings reveal system weaknesses (e.g., SOX and NIST-aligned requirements).
   </li>
  </ul>
  <li>
   Third-Party / MSP Oversight
  </li>
  <ul>
   <li>
    Engage third-party IT providers/MSPs to communicate HEICO security requirements and incident handling expectations (including evidence retention).
   </li>
   <li>
    Assess MSP execution against requirements, identify gaps, and escalate non-compliance through appropriate channels.
   </li>
  </ul>
  <li>
   Business Partnership, Reporting, and Travel
  </li>
  <ul>
   <li>
    Act as a liaison between HEICO Corporate security and supported subsidiaries to maintain alignment on security initiatives, upgrades, and operational expectations.
   </li>
   <li>
    Provide regular operational reporting (risk trends, incident metrics, remediation status, tooling effectiveness).
   </li>
   <li>
    Required quarterly travel to supported out-of-state sites (i.e. quarterly planned visits and additional travel during escalations) to understand environment baselines, strengthen stakeholder relationships, and improve response readiness.
   </li>
  </ul>
  <li>
   On-Call Support
  </li>
  <ul>
   <li>
    Participate in an on-call rotation and respond independently to security events outside standard business hours.
   </li>
   <li>
    Perform other professional cybersecurity duties consistent with the scope and level of the position.
   </li>
  </ul>
 </ul>
</div>


IT Security Operations Analyst

GPS Services, Inc.

<div><h2 class="jobSectionHeader"><b>About the Role</b></h2>
You play a critical role in protecting our people, assets, and brand by supporting the Global Security Operations Center (SOC) ecosystem across headquarters and Asset Protection services. Whether you&rsquo;re focused on HQ operations or store-focused services, you help deliver consistent, high-quality security programs that safeguard our locations and teams. You monitor and respond to security events, provide remote guarding support, and ensure standardized processes are followed across regions. Your work reduces risk, prevents loss, and strengthens trust in our ability to provide a safe environment for employees and customers.<h2 class="jobSectionHeader"><b>
What You'll Do</b></h2><ul><li>
Monitor and respond to security alerts across HQ and/or Asset Protection services, ensuring timely resolution and escalation.</li><li>
Support remote guarding and other standardized security services for stores or corporate locations, maintaining compliance with global security protocols.</li><li>
Analyze incident data to identify patterns and recommend improvements that enhance security effectiveness.</li><li>
Collaborate with SOC teams and external partners to coordinate investigations and implement corrective actions.</li><li>
Provide technical guidance and training to team members on security tools, systems, and procedures.</li><li>
Maintain accurate documentation of incidents, actions taken, and outcomes for reporting and audit purposes.</li><li>
Act as a liaison between HQ and Asset Protection teams to ensure alignment on policies and operational standards.</li><li>
Contribute to continuous improvement initiatives by sharing insights and applying learnings from past incidents.</li></ul><h2 class="jobSectionHeader"><b>
Who You Are</b></h2><ul><li>
Strong understanding of security operations, monitoring systems, and incident response protocols.</li><li>
Ability to analyze data and make decisions using established procedures and sound judgment.</li><li>
Skilled in using security technology platforms and tools.</li><li>
Effective communication and collaboration skills to work across teams and regions.</li><li>
Ability to handle complex or unique customer interactions with professionalism.</li><li>
Commitment to continuous improvement and adaptability in a dynamic environment.</li></ul></div>

Global Security Operations Analyst

Gap Inc.

<div><h2 class="jobSectionHeader"><b>About Gap Inc.</b></h2>
<p>At Gap Inc., we create culture as much as we create clothes. Our ambition is to become a high-performing house of iconic American brands that shape culture.</p>
<p>Our portfolio&mdash;Old Navy, Gap, Banana Republic, and Athleta&mdash;each brings a distinct point of view to how we show up in the world and serve our customers.</p>
<p>Old Navy democratizes style with quality and value for all. Gap champions originality through essential pieces that celebrate individuality. Banana Republic is rooted in a spirit of discovery, creating modern pieces inspired by craftsmanship and travel. Athleta champions the Power of She through confidence, strength, and movement.</p>
<p>We&rsquo;re driven by a shared purpose: to bridge gaps&mdash;between people, perspectives, and possibilities&mdash;to create a better world.</p>
<p>We&rsquo;re building a team that performs at a high level&mdash;people who think boldly, take ownership, and turn ideas into impact. If you&rsquo;re ready to learn fast and help shape what&rsquo;s next, you&rsquo;ll fit right in.</p><h2 class="jobSectionHeader"><b>
About the Role</b></h2><p>
You play a critical role in protecting our people, assets, and brand by supporting the Global Security Operations Center (SOC) ecosystem across headquarters and Asset Protection services. Whether you&rsquo;re focused on HQ operations or store-focused services, you help deliver consistent, high-quality security programs that safeguard our locations and teams. You monitor and respond to security events, provide remote guarding support, and ensure standardized processes are followed across regions. Your work reduces risk, prevents loss, and strengthens trust in our ability to provide a safe environment for employees and customers.</p><h2 class="jobSectionHeader"><b>
What You'll Do</b></h2><ul><li>
Monitor and respond to security alerts across HQ and/or Asset Protection services, ensuring timely resolution and escalation.</li><li>
Support remote guarding and other standardized security services for stores or corporate locations, maintaining compliance with global security protocols.</li><li>
Analyze incident data to identify patterns and recommend improvements that enhance security effectiveness.</li><li>
Collaborate with SOC teams and external partners to coordinate investigations and implement corrective actions.</li><li>
Provide technical guidance and training to team members on security tools, systems, and procedures.</li><li>
Maintain accurate documentation of incidents, actions taken, and outcomes for reporting and audit purposes.</li><li>
Act as a liaison between HQ and Asset Protection teams to ensure alignment on policies and operational standards.</li><li>
Contribute to continuous improvement initiatives by sharing insights and applying learnings from past incidents.</li></ul><h2 class="jobSectionHeader"><b>
Who You Are</b></h2><ul><li>
Strong understanding of security operations, monitoring systems, and incident response protocols.</li><li>
Ability to analyze data and make decisions using established procedures and sound judgment.</li><li>
Skilled in using security technology platforms and tools.</li><li>
Effective communication and collaboration skills to work across teams and regions.</li><li>
Ability to handle complex or unique customer interactions with professionalism.</li><li>
Commitment to continuous improvement and adaptability in a dynamic environment.</li></ul><h2 class="jobSectionHeader"><b>
Benefits at Gap Inc.</b></h2>
<ul><li>Merchandise discount for our brands: 50% off regular-priced merchandise at Old Navy, Gap, Banana Republic and Athleta, and 30% off at Outlet for all employees.</li>
<li>One of the most competitive Paid Time Off plans in the industry.*</li>
<li>Employees can take up to five &ldquo;on the clock&rdquo; hours each month to volunteer at a charity of their choice.*</li>
<li>Extensive 401(k) plan with company matching for contributions up to four percent of an employee&rsquo;s base pay.*</li>
<li>Employee stock purchase plan.*</li>
<li>Medical, dental, vision and life insurance.*</li>
<li>See more of the benefits we offer.</li>
</ul><ul><li><i>For eligible employees</i></li></ul><p>
Gap Inc. is an equal-opportunity employer and is committed to providing a workplace free from harassment and discrimination. We are committed to recruiting, hiring, training and promoting qualified people of all backgrounds, and make all employment decisions without regard to any protected status. We have received numerous awards for our long-held commitment to equality and will continue to foster a diverse and inclusive environment of belonging. In 2022, we were recognized by Forbes as one of the World's Best Employers and one of the Best Employers for Diversity.<br>
<br>
Salary Range: $59,800 - $74,800 USD<br>
Employee pay will vary based on factors such as qualifications, experience, skill level, competencies and work location. We will meet minimum wage or minimum of the pay range (whichever is higher) based on city, county and state requirements.</p></div>

Copex International INC

<p><b>Job Title:</b> Senior Security Operations (SOC/CSIRT) Analyst / Team Lead</p><p><b>Location:</b> Remote (Global candidates welcome; must work U.S. business hours)<br/><b>Employment Type:</b> Full-Time</p><p><b>Salary Range:</b> $130,000 &ndash; $145,000 (depending on experience)</p><p><b>About the Role</b></p><p>We are seeking an experienced Security Operations professional with a strong background in Security Operations Centers (SOC) and Computer Security Incident Response Teams (CSIRT). This role is hands-on and involves end-to-end ownership of complex cybersecurity incidents, as well as leadership responsibilities within a security operations environment.</p><p>The ideal candidate brings deep technical expertise, strong analytical capabilities, and the ability to operate effectively within U.S.-based teams and business environments.</p><p><b>Key Responsibilities</b></p><ul><li>Lead and manage cybersecurity incident response efforts from detection through remediation</li><li>Perform advanced alert triage, investigation, and escalation within a SOC environment</li><li>Conduct detailed log analysis across Windows and Linux systems</li><li>Apply frameworks such as MITRE ATT&amp;CK and Cyber Kill Chain to analyze threats</li><li>Collaborate with cross-functional teams to improve detection and response capabilities</li><li>Provide guidance and mentorship to junior analysts and SOC team members</li><li>Develop and refine incident response playbooks and processes</li><li>Communicate clearly with stakeholders, including technical and non-technical audiences</li></ul><p><b>Required Qualifications</b></p><ul><li>Proven, hands-on experience in SOC and/or CSIRT environments</li><li>Demonstrated experience managing complex cybersecurity incidents end-to-end</li><li>Advanced knowledge of:</li><li>Identity and access management, including Active Directory (AD)</li><li>Windows event logs (evtx) and system-level analysis</li><li>Multi-factor authentication (MFA)</li><li>Network protocols and traffic analysis</li><li>Common attack vectors and threat actor methodologies</li><li>Strong experience with log analysis (Windows/Linux)</li><li>Knowledge of Digital Forensics and Incident Response (DFIR)</li><li>Experience with security tools such as Splunk, CrowdStrike, Darktrace, Forescout, and Palo Alto NGFW</li><li>Prior team leadership or management experience</li><li>Excellent communication and stakeholder management skills</li><li><b>Professional fluency in English and Spanish (written and verbal)</b></li></ul><p><b>Work Requirements</b></p><ul><li>Must be available and consistently work during U.S. business hours</li><li>Must be comfortable working within U.S.-based teams and client environments</li><li>Strong understanding of U.S. workplace communication styles and expectations</li><li>Ability to collaborate effectively in a remote, multicultural environment</li></ul><p><b>Compensation &amp; Benefits</b></p><ul><li>Base salary: $130,000 &ndash; $145,000</li><li>Health insurance reimbursement</li><li>Paid time off</li></ul><p><b>Why Join Us</b></p><p>You will play a critical role in protecting enterprise environments by leading high-impact incident response efforts. This position offers the opportunity to work on complex security challenges while contributing to the growth and maturity of security operations programs.</p><p><b>To Apply:</b> Please submit your resume along with a cover letter.</p><p>Pay: $130,000.00 - $145,000.00 per year</p><p>Benefits:</p><ul><li>Health insurance</li><li>Paid time off</li></ul><p>Application Question(s):</p><ul><li>Describe a complex cybersecurity incident you handled end-to-end. Include your role, tools used, and outcome.</li><li>Which security tools have you used hands-on in production? (e.g., Splunk, CrowdStrike, Palo Alto, etc.)</li><li>What is you expected compensation rate?</li></ul><p>Language:</p><ul><li>both English and Spanish (written and verbal) (Required)</li></ul><p>Work Location: Remote</p>

Senior Security Operations (SOC/CSIRT) Analyst

PROZ TECHNOLOGIES

<p><b>Job Title:</b> SOC L2 Analyst (OT Security)<br/><b>Location:</b> Doha, Qatar (On-site)</p><p>About the Role</p><p>We are looking for an experienced <b>SOC L2 Analyst</b> to join a leading Security Operations Center (SOC) team in Qatar. The role focuses on <b>advanced threat monitoring, incident investigation, and response</b> across both IT and <b>Operational Technology (OT)</b> environments.</p><p>This is an excellent opportunity for cybersecurity professionals with strong <b>SIEM and incident handling experience</b>, especially those with exposure to <b>industrial/OT security systems</b>.</p><p>Key Responsibilities</p><ul><li>Investigate and analyze <b>security alerts and incidents</b>, including escalations from L1 analysts</li><li>Perform <b>in-depth threat analysis</b> across IT and OT environments</li><li>Act as an <b>incident responder</b> for security events and recommend remediation actions</li><li>Monitor and manage <b>SIEM alerts, logs, and SOC tickets</b> within SLA timelines</li><li>Escalate critical incidents to L3/Senior Analysts when required</li><li>Support and mentor <b>junior SOC analysts (L1)</b></li><li>Collaborate with internal teams to improve <b>threat detection and response capabilities</b></li><li>Contribute to SOC documentation, runbooks, and knowledge base</li></ul><p>Required Skills &amp; Experience</p><ul><li>Minimum <b>5+ years of experience</b> in SOC / Cybersecurity operations</li><li>Strong experience with <b>SIEM tools</b> (Splunk, QRadar, ArcSight, Azure Sentinel, etc.)</li><li>Hands-on experience in <b>incident detection, investigation, and response</b></li><li>Strong knowledge of <b>network security, logs, and attack patterns</b></li><li>Experience with security tools such as <b>EDR, IDS/IPS, Firewalls, Vulnerability Scanners</b></li><li>Familiarity with <b>MITRE ATT&amp;CK framework</b></li><li>Good understanding of <b>Windows, Linux, and network environments</b></li></ul><p>Preferred (Nice to Have)</p><ul><li>Experience with <b>OT / ICS / SCADA security environments</b></li><li>Knowledge of protocols like <b>Modbus, DNP3, BACnet</b></li><li>Exposure to <b>industrial cybersecurity frameworks</b></li><li>Basic scripting knowledge (Python, PowerShell, Bash)</li></ul><p>Certifications (Preferred)</p><ul><li>SC-200, GCIH, CEH, or equivalent cybersecurity certifications</li><li>SIEM certifications (Splunk, Azure Sentinel, etc.)</li><li>OT Security certifications (e.g., Nozomi) are a plus</li></ul><p>Ideal Candidate</p><ul><li>SOC L2 Analyst / Senior Security Analyst</li><li>Experience working in <b>MSSP or enterprise SOC environments</b></li><li>Strong analytical and problem-solving skills</li><li>Ability to work in a <b>24x7 SOC environment</b></li></ul><p>Job Type: Permanent</p><p>Pay: Up to QAR15,000.00 per month</p><p>Work Location: In person</p>

SOC L2 Analyst (OT Security)

ISSE SERVICES LLC

<div><p><b>SECURITY OPERATIONS CENTER ANALYST I
</b></p><p><b>Location:</b> Clearfield, UT <b>(This is not a remote position)</b></p>
<p><b>
MUST BE A U.S. CITIZEN (Due to contractual requirement)</b></p>
<p><b>
**SECURITY CLEARANCE PREFERRED**</b></p>
<p>
Job title: Security Operations Center Analyst 1</p>
<p>
Shift: Day Shift (7:00 am to 3:00 pm, Sun-Thurs)</p>
<p>
The Security Operations Center Analyst (SOCA) is an integral part of a team that monitors and manages client data and networks. In coordination with using security monitoring tools the individual provides constant vigilance against cyber incidents and system issues.</p>
<p>
Job Description: Working within a 24&times;7 Security Operations Center (SOC). Primary Responsibilities include:</p>
<ul><li>
Review and analyze vulnerability assessments</li><li>
Review and analyze log correlation and SIEM events and alarms</li><li>
Create and escalate tickets</li><li>
Review system changes for policy and procedure compliance</li><li>
Participate in Incident Response team activities</li><li>
Monitor and protect client data across the system boundary</li><li>
Manage and configure security monitoring tools</li></ul>
<p>
Skills Required:</p>
<ul><li>
Have an awareness about Cybersecurity</li><li>
Self-Motivated</li><li>
Ability to work in a team environment</li><li>
Willingness to bring new ideas and processes to a growing team</li></ul>
<p>
Skills Desired:</p>
<ul><li>
System Administration skills with Linux, Windows, Cisco</li><li>
Basic Programming Skills Python/Ruby, PHP, C, Java, Perl or other similar languages</li></ul>
<p>
Experience needed: 0-2yrs experience in cyber security practices.</p>
<p>
Related BS/BA Degree or certifications a plus</p>
<p>
Security+ certification preferred (required no later than 6 months after hire date)</p>
<p>
Must be 18 years of age and can pass a background and drug check</p>
<p>
Must have the flexibility to work various shifts</p>
<p>
Excellent Medical and Dental benefits. paid holiday, vacation and sick leave are provided.</p><p><b>
BENEFITS:</b></p>
<ul><li>
401(k) matching</li><li>
Dental insurance</li><li>
Health insurance</li><li>
Vision</li><li>
Basic life insurance</li><li>
Group short-term and long-term disability</li><li>
Paid time off (PTO)</li></ul></div>

Security Operation Center Analyst

Metro One LPSG

<div><div><div><b>SOC ANALYST</b></div><br>
<div></div>
<div>
M1 Global is seeking an SOC Analyst who views security as a core component of operational excellence. This role serves as a centralized hub for physical security operations, responsible for real-time alarm monitoring, incident triage, and coordinated response. The SOC Analyst leads communication during routine and crisis events, supports business continuity efforts, and ensures compliance with established security procedures.</div><br>
<div></div>
<div><b>
SCHEDULE: On-Call (Part Time)</b></div><br>
<div></div>
<div><b>
Key Responsibilities</b></div>
<ul><li>
Monitor and analyze alarms, access control, and intrusion systems to identify true threats and reduce false positives</li><li>
Audit and review security systems to identify vulnerabilities and recommend improvements</li><li>
Coordinate and dispatch resources during security incidents, serving as the primary communication hub</li><li>
Lead communication during crisis events, including preparedness alerts and business continuity actions</li><li>
Support commissioning, testing, and configuration of new or upgraded security systems</li><li>
Compile documentation and evidence for reports, audits, and investigations</li><li>
Refine security procedures based on evolving threats and operational needs</li></ul><br>
<div></div>
<div><b>
Communication &amp; Compliance</b></div>
<ul><li>
Provide clear, calm communication during rapidly evolving situations</li><li>
Escalate incidents according to established procedures</li><li>
Collaborate with internal teams and client representatives</li><li>
Follow all SOC SOPs, post orders, and regulatory requirements</li><li>
Participate in drills, tabletop exercises, and ongoing training</li></ul><br>
<div></div>
<div><b>
Required Qualifications</b></div>
<ul><li>
High school diploma or equivalent (college coursework in security or criminal justice preferred)</li><li>
Prior experience in a SOC, command center, alarm monitoring, or physical security environment</li><li>
Familiarity with video surveillance, access control, and alarm systems</li><li>
Strong situational awareness, decision-making, and stress management skills</li><li>
Ability to work rotating shifts, including nights, weekends, and holidays</li></ul><br>
<div></div>
<div><b>
Pay &amp; Benefits</b></div>
<ul><li>
Competitive pay</li><li>
Medical, dental, and vision insurance</li><li>
Paid time off</li><li>
401(k)</li><li>
Ongoing training and professional development opportunities</li></ul><div><br>
We are Equal Opportunity Employer</div></div></div>

Security Operations Center (SOC) Analyst

Search 10000+ Security operations analyst jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 security operations analyst jobs Near Me

IT Security Operations Analyst

Global Security Operations Analyst

Global Security Operations Analyst

Senior Security Operations (SOC/CSIRT) Analyst

SOC L2 Analyst (OT Security)

Security Operation Center Analyst

Security Operations Center (SOC) Analyst