Mid Level Security Analyst Jobs
Mid level security analyst jobs go to professionals ready to own investigations end to end, mentor junior analysts, and make threat-response decisions without constant oversight. Hiring runs across Technology & Software, Education, and Healthcare & Medical Services, with 30% of openings remote or hybrid, and employers like Meta, Infojini, and Citi competing for analysts at this level now.
Find JobsOverview
Showing 5 of 75+ Mid Level Security Analyst jobs
Do you want to do work that matters, alongside supportive leaders who will help you grow faster than you ever thought possible? Are you a creative problem-solver who is energized by challenges? You’ve come to the right place.
YOUR IMPACT
Your work focuses on monitoring, investigating, and responding to cybersecurity incidents across enterprise and multi-cloud environments.
You will investigate and respond to security incidents generated from multiple detection sources, serving as an incident handler for high-impact security events sources, serving as an incident handler for high-impact security events. You will perform endpoint, network, identity, and cloud log analysis to identify malicious activity, determine root cause, communicate to leadership and recommend appropriate containment and remediation actions.
You will conduct incident triage, containment, eradication, recovery, and post-incident documentation in accordance with established response procedures. You will also perform threat hunting activities using endpoint, network, and cloud telemetry to proactively identify suspicious behavior and emerging threats.
You will develop, tune, and optimize security detection use cases, correlation rules, to improve monitoring effectiveness and reduce false positives. You will contribute to the development and enhancement of SOC automation workflows and playbooks to improve operational efficiency. Also, you will contribute to the continuous improvement of SOC processes, detection capabilities, and incident response procedures.
YOUR GROWTH
You are someone who thrives in a high-performance environment, bringing a growth mindset and entrepreneurial spirit to tackle meaningful challenges that have a real impact.
In return for your drive, determination, and curiosity, we’ll provide the resources, mentorship, and opportunities to help you quickly broaden your expertise, grow into a well-rounded professional, and contribute to work that truly makes a difference.
When you join us, you will have:
- Continuous learning: Our learning and apprenticeship culture, backed by structured programs, is all about helping you grow while creating an environment where feedback is clear, actionable, and focused on your development. The real magic happens when you take the input from others to heart and embrace the fast-paced learning experience, owning your journey.
- A voice that matters: From day one, we value your ideas and contributions. You’ll make a tangible impact by offering innovative ideas and practical solutions, all while upholding our unwavering commitment to ethics and integrity. We not only encourage diverse perspectives, but they are critical in driving us toward the best possible outcomes.
- Global community: With colleagues across 65+ countries and over 100 different nationalities, our firm’s diversity fuels creativity and helps us come up with the best solutions. Plus, you’ll have the opportunity to learn from exceptional colleagues with diverse backgrounds and experiences.
- Exceptional benefits: On top of a competitive salary (based on your location, experience, and skills), we provide a comprehensive benefits package to enable holistic well-being for you and your family.
YOUR QUALIFICATIONS AND SKILLS
Industry certifications such as GCIH, GCFA, GCFE, CEH, or equivalent are preferred
4+ years of hands-on experience in Security Operations, Cyber Defense, Incident Response, or Threat Detection
Experience working within a Security Operations Center (SOC) or Cyber Defense team, handling security monitoring and incident response activities
Strong understanding of security monitoring, incident detection, investigation, and response across enterprise and multi-cloud environments
Hands-on experience investigating security events across AWS, Microsoft Azure, and Google Cloud Platform (GCP), with familiarity with cloud-native security services and logging
Solid understanding of the Cyber Kill Chain®, MITRE ATT&CK Framework, modern threat actor tactics, techniques, and procedures (TTPs), and incident response methodologies
Experience analyzing endpoint, network, authentication, application, and cloud logs using SIEM and XDR platforms
Strong working knowledge of Microsoft Defender EDR, and Palo Alto Cortex XSIAM
Experience using EDR/XDR, SIEM, IDS/IPS, email security, identity security, and cloud security tools during investigations
Working knowledge of Python, PowerShell, or Bash for investigation, automation, or operational efficiency
Strong analytical and problem-solving skills with the ability to investigate and resolve complex security incidents
Do you want to do work that matters, alongside supportive leaders who will help you grow faster than you ever thought possible? Are you a creative problem-solver who is energized by challenges? You’ve come to the right place.
YOUR IMPACT
Your work focuses on monitoring, investigating, and responding to cybersecurity incidents across enterprise and multi-cloud environments.
You will investigate and respond to security incidents generated from multiple detection sources, serving as an incident handler for high-impact security events sources, serving as an incident handler for high-impact security events. You will perform endpoint, network, identity, and cloud log analysis to identify malicious activity, determine root cause, communicate to leadership and recommend appropriate containment and remediation actions.
You will conduct incident triage, containment, eradication, recovery, and post-incident documentation in accordance with established response procedures. You will also perform threat hunting activities using endpoint, network, and cloud telemetry to proactively identify suspicious behavior and emerging threats.
You will develop, tune, and optimize security detection use cases, correlation rules, to improve monitoring effectiveness and reduce false positives. You will contribute to the development and enhancement of SOC automation workflows and playbooks to improve operational efficiency. Also, you will contribute to the continuous improvement of SOC processes, detection capabilities, and incident response procedures.
YOUR GROWTH
You are someone who thrives in a high-performance environment, bringing a growth mindset and entrepreneurial spirit to tackle meaningful challenges that have a real impact.
In return for your drive, determination, and curiosity, we’ll provide the resources, mentorship, and opportunities to help you quickly broaden your expertise, grow into a well-rounded professional, and contribute to work that truly makes a difference.
When you join us, you will have:
- Continuous learning: Our learning and apprenticeship culture, backed by structured programs, is all about helping you grow while creating an environment where feedback is clear, actionable, and focused on your development. The real magic happens when you take the input from others to heart and embrace the fast-paced learning experience, owning your journey.
- A voice that matters: From day one, we value your ideas and contributions. You’ll make a tangible impact by offering innovative ideas and practical solutions, all while upholding our unwavering commitment to ethics and integrity. We not only encourage diverse perspectives, but they are critical in driving us toward the best possible outcomes.
- Global community: With colleagues across 65+ countries and over 100 different nationalities, our firm’s diversity fuels creativity and helps us come up with the best solutions. Plus, you’ll have the opportunity to learn from exceptional colleagues with diverse backgrounds and experiences.
- Exceptional benefits: On top of a competitive salary (based on your location, experience, and skills), we provide a comprehensive benefits package to enable holistic well-being for you and your family.
YOUR QUALIFICATIONS AND SKILLS
Industry certifications such as GCIH, GCFA, GCFE, CEH, or equivalent are preferred
4+ years of hands-on experience in Security Operations, Cyber Defense, Incident Response, or Threat Detection
Experience working within a Security Operations Center (SOC) or Cyber Defense team, handling security monitoring and incident response activities
Strong understanding of security monitoring, incident detection, investigation, and response across enterprise and multi-cloud environments
Hands-on experience investigating security events across AWS, Microsoft Azure, and Google Cloud Platform (GCP), with familiarity with cloud-native security services and logging
Solid understanding of the Cyber Kill Chain®, MITRE ATT&CK Framework, modern threat actor tactics, techniques, and procedures (TTPs), and incident response methodologies
Experience analyzing endpoint, network, authentication, application, and cloud logs using SIEM and XDR platforms
Strong working knowledge of Microsoft Defender EDR, and Palo Alto Cortex XSIAM
Experience using EDR/XDR, SIEM, IDS/IPS, email security, identity security, and cloud security tools during investigations
Working knowledge of Python, PowerShell, or Bash for investigation, automation, or operational efficiency
Strong analytical and problem-solving skills with the ability to investigate and resolve complex security incidents
See All 75 Mid Level Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsMid Level Security Analyst Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software27
- Education5
- Healthcare & Medical Services5
- Banking & Financial Services4
- Insurance3
Mid Level Security Analyst Jobs: Frequently Asked Questions
How do I get a mid level security analyst job?
Position your experience around ownership, not just participation. Highlight incidents you led, tools you configured independently, and processes you improved rather than simply followed. Certifications like Security+, CySA+, or CEH reinforce technical depth. Tailor your resume to show measurable impact, such as reduced response times or vulnerabilities remediated, so hiring managers immediately see you operating above the entry level.
Which companies hire mid level security analysts?
Companies hiring mid level security analysts right now include Meta, Infojini, and Citi, based on current listings on Migrate Mate as of August 2026. Hiring at this level comes from a wide range of employers, including large enterprises building out security operations centers, financial institutions managing compliance requirements, and government contractors maintaining cleared environments.
Are there remote mid level security analyst jobs?
Yes, remote and hybrid options are common at this level. About 30% of mid level security analyst openings are remote or hybrid as of August 2026, reflecting how many organizations now staff security operations across distributed teams. Roles tied to classified data or on-site infrastructure tend to require in-person presence, but the majority of analytical and monitoring work can be done remotely.
How do I move up to a mid level security analyst role?
Growth from entry level to mid level comes from building depth, not just time served. Focus on developing hands-on expertise in one or two areas, such as threat detection, vulnerability management, or incident response, and take on projects where you own the outcome. Document measurable results, pursue relevant certifications, and seek out situations where you are making decisions rather than executing instructions.
Which industries hire the most mid level security analysts?
Mid Level security analyst roles concentrate in Technology & Software, Education, and Healthcare & Medical Services, based on current listings on Migrate Mate as of August 2026. These sectors drive demand at this level because they operate complex environments with large attack surfaces, strict regulatory requirements, or both, making experienced analysts who can work independently essential rather than optional.