Senior Security Analyst

About the role

Gartner is seeking a Senior Security Analyst to strengthen its global Security Operations Center. You will independently investigate complex incidents, improve detection and response, and protect the company’s people, data, and intellectual property.

Key responsibilities

• Investigate security incidents from triage through containment, remediation and closure, escalating high‑impact events as needed.
• Correlate evidence across SIEM/XDR, EDR, email, proxy, network and cloud telemetry to determine root cause and impact.
• Develop and tune detection content, investigative workflows and playbooks aligned with MITRE ATT&CK and other frameworks.
• Build automation tools (Python, PowerShell, Bash) to reduce repetitive work and accelerate investigations.
• Mentor junior analysts, act as an escalation point and share knowledge to improve SOC effectiveness.

Required profile

• 3‑5 years of experience in information security, security operations or incident response.
• Hands‑on experience with SIEM/XDR, EDR, email security, web proxy and digital forensics.
• Experience investigating cloud environments (AWS, Azure, GCP) and using query languages such as SPL, KQL or SQL.
• Strong written and verbal communication skills for clear documentation and stakeholder engagement.

Required skills

• SIEM/XDR platforms
• EDR tools
• Email security and web proxy solutions
• Digital forensics
• Cloud platforms: AWS, Azure, GCP
• Query languages: SPL, KQL, SQL
• Automation scripting: Python, PowerShell, Bash

What we offer

• Visible impact on a global SOC and protection of a worldwide business.
• Ownership of complex incident investigations and influence over outcomes.
• Access to modern security tools and investment to enable best work.
• Collaboration with skilled colleagues in an inclusive, security‑first culture.