Security Operations Center Analyst Jobs
Security Operations Center Analyst jobs are open across defense, finance, healthcare, and technology, from entry-level tier-one roles to senior analyst and SOC lead positions, with specializations in threat detection, incident response, and SIEM management. Find a role that fits from the openings below and apply directly.
Find JobsOverview
Showing 5 of 7+ Security Operations Center Analyst jobs
At Ardent, we hire people who want more than a job — they want to serve a mission that matters. Our teams support the federal government's most critical national security and defense priorities, helping protect the nation, strengthen resilience, and advance the technologies and capabilities that keep America secure. For veterans, cleared professionals, and purpose-driven innovators, Ardent is a place to continue serving alongside a team that understands the importance of the mission and the people behind it.
We also know top talent has choices, which is why we back our mission with benefits and flexibility that stand out: competitive pay, comprehensive health coverage, flexible PTO, federal holidays off, tuition reimbursement, professional development support, wellness stipends, and a culture that values and rewards hard work, dedication, and adaptability. If you want to build something meaningful, while enjoying the kind of flexibility and support that you need to do your best work — Ardent is where your next mission begins.
INTRODUCTION
Ardent is seeking a Security Operations Center (SOC) Analyst to join our team.
This is a remote position.
Position Description:
Ardent is seeking a Security Operations Center (SOC) Analyst to support 24x7 security monitoring, alert triage, and incident response activities across enterprise environments. This role combines Tier I and Tier II responsibilities, including initial alert validation, advanced investigation, and coordination of incident response efforts to ensure timely detection, analysis, and remediation of security threats.
Responsibilities and Duties:
- Monitor security alerts and events in a 24x7 SOC environment.
- Perform initial triage and validation of alerts to determine severity and impact.
- Conduct advanced alert investigation and analyze security events across identity, endpoint, and network telemetry.
- Handle Tier I escalation workflows and support Tier II incident response activities.
- Coordinate incident containment efforts and escalate complex incidents to Tier III as needed.
- Monitor log ingestion pipelines and ensure data sources are functioning properly.
- Document incidents, findings, and response actions in accordance with SOC procedures.
- Contribute to daily reporting and provide accurate shift handoff documentation.
- Identify trends, anomalies, and potential threats through continuous monitoring and analysis.
- Collaborate with cross-functional teams to support incident resolution and improve detection capabilities.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent work experience.
- Minimum of 4 years of experience in a Security Operations Center (SOC) or cybersecurity operations role.
- Experience with security monitoring tools, SIEM platforms, and incident response processes.
- Strong understanding of alert triage, escalation procedures, and incident handling workflows.
- Experience analyzing logs, alerts, and telemetry from identity, endpoint, and network systems.
- Ability to work in a 24x7 operational environment, including shift-based coverage.
- Must hold at least one of the following certifications or equivalent: GCIA, GCIH, CISSP, CEH, or similar cybersecurity certification.
Preferred Qualifications:
- Experience with Microsoft Sentinel or Microsoft security platforms.
- Relevant cloud security certifications (e.g., AWS security).
- Familiarity with log ingestion pipelines and monitoring data health.
- Privacy certifications such as CIPP/US or CIPM.
- Experience supporting federal or regulated environments.
Due to the nature of the work we support, all candidates in consideration for this role must be willing to undergo the government issued background investigation process. We highly encourage all Veterans and those with disabilities to apply.
Ardent is an equal opportunity employer. We will not discriminate in employment, recruitment, advertisements for employment, compensation, termination, upgrading, promotions, and other conditions of employment against any employee or job applicant on the bases of race, color, gender, national origin, age, religion, creed, disability, veteran's status, sexual orientation, gender identity, gender expression, or any other basis protected by state, local, or federal law.
At Ardent, we hire people who want more than a job — they want to serve a mission that matters. Our teams support the federal government's most critical national security and defense priorities, helping protect the nation, strengthen resilience, and advance the technologies and capabilities that keep America secure. For veterans, cleared professionals, and purpose-driven innovators, Ardent is a place to continue serving alongside a team that understands the importance of the mission and the people behind it.
We also know top talent has choices, which is why we back our mission with benefits and flexibility that stand out: competitive pay, comprehensive health coverage, flexible PTO, federal holidays off, tuition reimbursement, professional development support, wellness stipends, and a culture that values and rewards hard work, dedication, and adaptability. If you want to build something meaningful, while enjoying the kind of flexibility and support that you need to do your best work — Ardent is where your next mission begins.
INTRODUCTION
Ardent is seeking a Security Operations Center (SOC) Analyst to join our team.
This is a remote position.
Position Description:
Ardent is seeking a Security Operations Center (SOC) Analyst to support 24x7 security monitoring, alert triage, and incident response activities across enterprise environments. This role combines Tier I and Tier II responsibilities, including initial alert validation, advanced investigation, and coordination of incident response efforts to ensure timely detection, analysis, and remediation of security threats.
Responsibilities and Duties:
- Monitor security alerts and events in a 24x7 SOC environment.
- Perform initial triage and validation of alerts to determine severity and impact.
- Conduct advanced alert investigation and analyze security events across identity, endpoint, and network telemetry.
- Handle Tier I escalation workflows and support Tier II incident response activities.
- Coordinate incident containment efforts and escalate complex incidents to Tier III as needed.
- Monitor log ingestion pipelines and ensure data sources are functioning properly.
- Document incidents, findings, and response actions in accordance with SOC procedures.
- Contribute to daily reporting and provide accurate shift handoff documentation.
- Identify trends, anomalies, and potential threats through continuous monitoring and analysis.
- Collaborate with cross-functional teams to support incident resolution and improve detection capabilities.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent work experience.
- Minimum of 4 years of experience in a Security Operations Center (SOC) or cybersecurity operations role.
- Experience with security monitoring tools, SIEM platforms, and incident response processes.
- Strong understanding of alert triage, escalation procedures, and incident handling workflows.
- Experience analyzing logs, alerts, and telemetry from identity, endpoint, and network systems.
- Ability to work in a 24x7 operational environment, including shift-based coverage.
- Must hold at least one of the following certifications or equivalent: GCIA, GCIH, CISSP, CEH, or similar cybersecurity certification.
Preferred Qualifications:
- Experience with Microsoft Sentinel or Microsoft security platforms.
- Relevant cloud security certifications (e.g., AWS security).
- Familiarity with log ingestion pipelines and monitoring data health.
- Privacy certifications such as CIPP/US or CIPM.
- Experience supporting federal or regulated environments.
Due to the nature of the work we support, all candidates in consideration for this role must be willing to undergo the government issued background investigation process. We highly encourage all Veterans and those with disabilities to apply.
Ardent is an equal opportunity employer. We will not discriminate in employment, recruitment, advertisements for employment, compensation, termination, upgrading, promotions, and other conditions of employment against any employee or job applicant on the bases of race, color, gender, national origin, age, religion, creed, disability, veteran's status, sexual orientation, gender identity, gender expression, or any other basis protected by state, local, or federal law.
See All Security Operations Center Analyst Jobs
Jump back to the full list of openings and apply to any security operations center analyst role that fits.
Find JobsSecurity Operations Center Analyst Job Market
A snapshot from current openings nationwide, updated as new roles post.
Who's Hiring
- ARDENT1
- CEVA Logistics1
- State Street1
- Sysco1
- Tata Consultancy Services (TCS)1
Top Industries Hiring
- Technology & Software2
- Banking & Financial Services1
- Education1
- Food & Beverage1
- Healthcare & Medical Services1
What Employers Look For
The qualifications that appear most often in security operations center analyst jobs.
- 1-3 years of hands-on experience in a security operations or incident response environment
- Proficiency with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- CompTIA Security+ or CySA+ certification, or equivalent industry credential
- Ability to analyze network traffic, system logs, and endpoint telemetry for indicators of compromise
- Familiarity with frameworks including MITRE ATT&CK, NIST, and the Cyber Kill Chain
- Bachelor's degree in cybersecurity, information technology, computer science, or a related field
Tips for Your Security Operations Center Analyst Job Search
Tailor your resume to SOC tiers
SOC analyst postings almost always specify tier level. Align your resume to the tier you're targeting by leading with the tools and alert-triage responsibilities that match that level, not a generic cybersecurity summary.
Certify before you apply for senior roles
CompTIA CySA+, Security+, and CEH show up in the majority of mid-to-senior SOC postings. If you're targeting those levels without one, your application is likely filtered before a human reviews it.
Apply early to roles that fit
Migrate Mate lists security operations center analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Highlight specific SIEM platforms by name
Hiring managers scan for Splunk, Microsoft Sentinel, IBM QRadar, or Elastic SIEM by name. List every platform you have hands-on experience with in a dedicated tools section so it registers in both ATS scans and recruiter reviews.
Prepare for a technical screening scenario
SOC interviews routinely include a live log analysis or simulated alert triage. Before your interview, practice walking through an incident timeline out loud, covering detection, containment, and escalation steps in sequence.
Negotiate shift differential and on-call terms
Many SOC roles run 24/7 operations with rotating shifts or on-call obligations. Before accepting an offer, clarify the rotation schedule and whether overnight or weekend shifts carry additional compensation.
Security Operations Center Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most security operations center analysts?
The companies hiring the most security operations center analysts right now include ARDENT, CEVA Logistics, and State Street, with the largest share of openings in Texas, Michigan, and Tennessee, based on current listings on Migrate Mate as of June 2026. Defense contractors, large financial institutions, and managed security service providers consistently account for the highest volume of postings.
How many security operations center analyst jobs are remote?
About 29% of security operations center analyst openings are fully remote or hybrid as of June 2026, though many roles in government and cleared defense environments require on-site presence. Threat intelligence, SIEM engineering, and tier-one triage functions tend to have the highest remote availability within the SOC career track.
How do you become a security operations center analyst?
Start with a foundation in networking and operating systems, then pursue an entry-level certification such as CompTIA Security+. Build hands-on experience through a home lab, a helpdesk or IT support role, or an internship with a security team. Apply to tier-one SOC positions and work toward CySA+ or a SIEM-specific credential as you gain alert-handling experience on the job.
Can you get a security operations center analyst job with no experience?
Yes, tier-one SOC analyst roles are specifically designed as entry points and many employers will hire candidates without prior security operations experience if you hold CompTIA Security+ and can demonstrate familiarity with log analysis and alert triage. A home lab running a free SIEM instance, a capstone project from a cybersecurity bootcamp, or relevant coursework often substitutes for direct work history at the entry level.
What does the security operations center analyst interview process look like?
Most SOC analyst hiring processes begin with a recruiter screen followed by a technical phone interview covering networking fundamentals, common attack types, and SIEM tool knowledge. A live or take-home scenario then asks you to analyze a set of logs or walk through an incident response sequence. Final rounds typically involve a panel with senior analysts or a SOC manager who assesses your escalation judgment and communication under pressure.
Where can I find and apply to security operations center analyst jobs?
You can find and apply to security operations center analyst jobs on Migrate Mate, which lists current openings from across the United States. Search the available roles, find the ones that match your experience and target tier, and apply directly to each listing.
See All Security Operations Center Analyst Jobs
Jump back to the full list of openings and apply to any security operations center analyst role that fits.
Find Jobs