Security Operations Analyst Jobs
Security Operations Analyst jobs are open across defense, financial services, healthcare, and technology, from entry-level SOC tier-one roles to senior analyst and team-lead positions, with specializations in threat detection, incident response, and vulnerability management. Find a role that fits from the openings below and apply directly.
Find JobsOverview
Showing 5 of 75+ Security Operations Analyst jobs
Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.
Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.
Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.
Responsibilities:
The Senior Security Operations Analyst is critical to protecting Haleon’s corporate assets and managing its day-to-day operational cyber security defences. It involves detailed analysis to identify threats, quantify vulnerabilities and reduce risk to the company. It requires the timely review of cyber security alerts generated by security devices, assessment of the situation and management of incidents to successful resolution. In all cases, the incumbent will be required to respond to events using appropriate tools and procedures. Senior Analysts are expected to have the technical dexterity to choose the right tool for the job and to understand how to use it effectively across a range of security scenarios.
The post holder will:
- Operate as part of a 24/7 Cyber Security Operations (SecOps) team that continuously monitors the security of the company.
- Undertake the timely triage of security alerts to allow for rapid incident detection and response.
- Perform deep-dive analysis of security events, logs, network traffic and forensic data to determine root cause, identifying suspicious and/or anomalous activities and taking appropriate action based on documented processes and procedures.
- Recommended modifications to internal defences and processes for more effective and efficient security operations.
- Manage security incidents through all phases of the incident response lifecycle from identification through to closure.
- Ensures that delegated response and remediation actions are completed in line with SLAs.
- Provides expert analytic investigative support of complex security incidents.
- Supports the tuning of all security tooling and the development of bespoke correlation rules/use cases aligned to business operations, internal risk profiles and current threat intelligence.
- Ensure that the automation and orchestration of day-to-day operations is maximised, and that analysis/response activities are performed as efficiently as possible.
- Execute L2/L3 event or incident response and investigations into suspicious activity.
- Shape the operations to successfully manage cases, lead the response process, and delegate tasks to junior incident responders and MSSP analysts.
- Generate post-incident reviews to ensure gaps are closed to prevent future events.
- Collaborate with Threat Intelligence to groom threat feeds and help translate findings.
- Help prioritize content, develop, and implement playbooks and runbooks.
- Be a key member of the Cyber Incident Response Team (CIRT) during major cyber incidents.
- Establish and maintain relationships with other investigation and remediation teams within the company, working closely with them to address the full spectrum of security issues.
- Lead efforts in developing security awareness training for the broader organisation.
Required Skills and Experience:
- Five years of experience in cybersecurity, working in a Cyber Security Operations Center.
- Experience responding to significant cyber incidents which may involve Organised Crime and Nations State threat actors.
Preferred Skills and Experience:
- Bachelor’s or Master’s Degree in Computer Science, Cyber Security or related field (or equivalent experience).
- Three years working in a Cyber Security Operations Centre.
- Experience working across international manufacturing.
- Understanding of security controls and how they are used to detect and respond.
- Knowledge of common network protocols, edge routing technologies, firewall/IDS/IPS, SIEM, EDR/XDR.
- Ability to communicate complex problems succinctly.
- Ability to work within a team environment, sharing workload and responsibility.
- CISSP, GCIA, GCDA, GSOC, GCIH.
Location:
This position is located in Warren, NJ and will require 5 days in office and an on-call weekend rotation.
The expected salary range for this role is: $149,994 - $224,991
Benefits
Haleon offers a robust Total Reward package that consists of competitive pay and a comprehensive benefits program. This includes a generous 401(k) plan, tuition reimbursement and time off programs including 6 months paid parental leave. On day one, you are eligible for benefits, including our healthcare programs where the company pays for the majority of your medical coverage for you and your family. We also offer the opportunity to receive a discretionary bonus based on the achievement of key business performance and other incentive/recognition programs as part of the offering.
Job Posting End Date
2026-07-15
Equal Opportunities
Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.
During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees.
The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.
Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, Haleon may be required to capture and report expenses Haleon incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure Haleon’s compliance to all federal and state US Transparency requirements.
Accommodation Requests
If you require a reasonable accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please contact us by sending an email to HR.AmericasSC-CS@haleon.com. Please include the following in your email:
Use subject line: ‘Haleon Careers: Job Accommodation Request’
Your Name and contact information
Requisition ID and Job Title you are interested in
Location of Requisition (city/state or province/country)
Description of specific accommodation you are requesting
Please note: Resumes, CVs, or other requests outside of accommodation support submitted to this email box will not be accepted.
Note to candidates
The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.
Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.
Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.
Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.
Responsibilities:
The Senior Security Operations Analyst is critical to protecting Haleon’s corporate assets and managing its day-to-day operational cyber security defences. It involves detailed analysis to identify threats, quantify vulnerabilities and reduce risk to the company. It requires the timely review of cyber security alerts generated by security devices, assessment of the situation and management of incidents to successful resolution. In all cases, the incumbent will be required to respond to events using appropriate tools and procedures. Senior Analysts are expected to have the technical dexterity to choose the right tool for the job and to understand how to use it effectively across a range of security scenarios.
The post holder will:
- Operate as part of a 24/7 Cyber Security Operations (SecOps) team that continuously monitors the security of the company.
- Undertake the timely triage of security alerts to allow for rapid incident detection and response.
- Perform deep-dive analysis of security events, logs, network traffic and forensic data to determine root cause, identifying suspicious and/or anomalous activities and taking appropriate action based on documented processes and procedures.
- Recommended modifications to internal defences and processes for more effective and efficient security operations.
- Manage security incidents through all phases of the incident response lifecycle from identification through to closure.
- Ensures that delegated response and remediation actions are completed in line with SLAs.
- Provides expert analytic investigative support of complex security incidents.
- Supports the tuning of all security tooling and the development of bespoke correlation rules/use cases aligned to business operations, internal risk profiles and current threat intelligence.
- Ensure that the automation and orchestration of day-to-day operations is maximised, and that analysis/response activities are performed as efficiently as possible.
- Execute L2/L3 event or incident response and investigations into suspicious activity.
- Shape the operations to successfully manage cases, lead the response process, and delegate tasks to junior incident responders and MSSP analysts.
- Generate post-incident reviews to ensure gaps are closed to prevent future events.
- Collaborate with Threat Intelligence to groom threat feeds and help translate findings.
- Help prioritize content, develop, and implement playbooks and runbooks.
- Be a key member of the Cyber Incident Response Team (CIRT) during major cyber incidents.
- Establish and maintain relationships with other investigation and remediation teams within the company, working closely with them to address the full spectrum of security issues.
- Lead efforts in developing security awareness training for the broader organisation.
Required Skills and Experience:
- Five years of experience in cybersecurity, working in a Cyber Security Operations Center.
- Experience responding to significant cyber incidents which may involve Organised Crime and Nations State threat actors.
Preferred Skills and Experience:
- Bachelor’s or Master’s Degree in Computer Science, Cyber Security or related field (or equivalent experience).
- Three years working in a Cyber Security Operations Centre.
- Experience working across international manufacturing.
- Understanding of security controls and how they are used to detect and respond.
- Knowledge of common network protocols, edge routing technologies, firewall/IDS/IPS, SIEM, EDR/XDR.
- Ability to communicate complex problems succinctly.
- Ability to work within a team environment, sharing workload and responsibility.
- CISSP, GCIA, GCDA, GSOC, GCIH.
Location:
This position is located in Warren, NJ and will require 5 days in office and an on-call weekend rotation.
The expected salary range for this role is: $149,994 - $224,991
Benefits
Haleon offers a robust Total Reward package that consists of competitive pay and a comprehensive benefits program. This includes a generous 401(k) plan, tuition reimbursement and time off programs including 6 months paid parental leave. On day one, you are eligible for benefits, including our healthcare programs where the company pays for the majority of your medical coverage for you and your family. We also offer the opportunity to receive a discretionary bonus based on the achievement of key business performance and other incentive/recognition programs as part of the offering.
Job Posting End Date
2026-07-15
Equal Opportunities
Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.
During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees.
The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.
Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, Haleon may be required to capture and report expenses Haleon incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure Haleon’s compliance to all federal and state US Transparency requirements.
Accommodation Requests
If you require a reasonable accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please contact us by sending an email to HR.AmericasSC-CS@haleon.com. Please include the following in your email:
Use subject line: ‘Haleon Careers: Job Accommodation Request’
Your Name and contact information
Requisition ID and Job Title you are interested in
Location of Requisition (city/state or province/country)
Description of specific accommodation you are requesting
Please note: Resumes, CVs, or other requests outside of accommodation support submitted to this email box will not be accepted.
Note to candidates
The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.
See All 75+ Security Operations Analyst Jobs
Jump back to the full list of openings and apply to any security operations analyst role that fits.
Find JobsSecurity Operations Analyst Job Market
A snapshot from current openings nationwide, updated as new roles post.
Who's Hiring
- Security Benefit4
- TD Securities3
- Citi2
- Infojini2
- Kaseya2
Top Industries Hiring
- Technology & Software25
- Investment & Asset Management9
- Banking & Financial Services6
- Education6
- Food & Beverage6
What Employers Look For
The qualifications that appear most often in security operations analyst jobs.
- Experience monitoring and triaging alerts in a SIEM platform such as Splunk or Microsoft Sentinel
- Proficiency with endpoint detection and response tools, commonly CrowdStrike or SentinelOne
- CompTIA Security+ certification or equivalent baseline security credential
- Familiarity with the MITRE ATT&CK framework for threat classification and investigation
- Ability to write and tune detection rules, correlation searches, or playbooks for automated response
- Bachelor's degree in cybersecurity, information technology, or a related technical field
Tips for Your Security Operations Analyst Job Search
Tailor your resume to SOC tools
List the specific SIEM platforms, EDR tools, and ticketing systems you have hands-on experience with, such as Splunk, CrowdStrike, or ServiceNow. Hiring managers scan for these names first, so put them high on the page.
Earn certifications before you apply
CompTIA Security+, CySA+, and the GIAC Security Essentials are widely required or preferred across security operations analyst postings. Completing one before you apply makes your resume competitive even when your direct SOC experience is limited.
Target openings by SOC tier level
Job titles vary more than the responsibilities do. Search for Tier 1, Tier 2, and Tier 3 analyst roles separately, since each maps to a different alert-triage depth and you want to apply at the tier that matches your current skill set.
Apply early to roles that fit
Migrate Mate lists security operations analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare a walkthrough of a real incident
Interviewers almost always ask you to walk through a detection or triage scenario you have handled. Prepare a concise, structured narrative covering what triggered the alert, how you investigated, and what actions you took to contain or escalate.
Negotiate shift expectations upfront
Many SOC roles involve rotating shifts, overnight coverage, or on-call rotations that are not always spelled out in job postings. Clarify scheduling expectations before or during the offer stage so there are no surprises after you accept.
Security Operations Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most security operations analysts?
The companies hiring the most security operations analysts right now include Security Benefit, TD Securities, and Citi, with the largest share of openings in Texas, New York, and California, based on current listings on Migrate Mate as of June 2026. Defense contractors, large financial institutions, and managed security service providers consistently account for a significant portion of total demand.
How many security operations analyst jobs are remote?
About 33% of security operations analyst openings are fully remote or hybrid as of June 2026, though availability varies significantly by employer type. Threat intelligence, vulnerability management, and cloud security monitoring roles tend to offer more remote flexibility than shift-based SOC analyst positions, which often require on-site presence for classified environments or sensitive infrastructure.
How do you become a security operations analyst?
Start by building a foundation in networking and operating systems, then pursue a recognized entry-level certification such as CompTIA Security+ or CySA+. Get hands-on practice through a home lab, capture-the-flag competitions, or a helpdesk role that exposes you to security tooling. Apply to Tier 1 SOC positions, which are specifically designed for analysts who are earlier in their careers and learning triage workflows on the job.
Can I get a security operations analyst job with little experience?
Yes, Tier 1 SOC analyst roles are the standard entry point and do not require prior SOC experience. Employers in this tier prioritize your ability to follow a runbook, escalate correctly, and learn quickly under volume. Certifications like Security+ substitute for experience on many job postings, and a home lab or documented personal projects can demonstrate hands-on initiative when your resume is otherwise thin.
What does the security operations analyst interview process look like?
Most hiring processes include an initial recruiter screen, a technical phone interview covering networking fundamentals and security concepts, and a practical scenario or take-home exercise where you analyze a log file or walk through an incident. Final rounds often involve a panel with SOC leads or security engineers who ask you to talk through how you would respond to a specific alert type from initial detection through escalation or containment.
Where can I find and apply to security operations analyst jobs?
You can find and apply to security operations analyst jobs on Migrate Mate, which lists current openings from employers across the United States. Find roles that match your experience level and specialization, then apply directly to each listing from the page.
See All 75+ Security Operations Analyst Jobs
Jump back to the full list of openings and apply to any security operations analyst role that fits.
Find Jobs