SOC Analyst Jobs in Massachusetts
SOC Analyst jobs in Massachusetts are in strong demand, concentrated in financial services, healthcare, defense contracting, and higher education, with openings at every level from entry-level tier-one analysts through senior threat hunters and incident response leads. Boston, Cambridge, and Waltham are the primary hiring centers, home to anchor employers such as Fidelity Investments, Raytheon Technologies, and Mass General Brigham, all of which maintain dedicated security operations functions. The most sought-after specialties in Massachusetts listings are threat detection and SIEM engineering, cloud security monitoring, and compliance-aligned security operations for regulated industries. Find a role that fits below and apply directly.
Find SOC Analyst JobsOverview
Showing 5 of 26+ SOC Analyst jobs
Mass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham.
Job Summary
The Opportunity
The Mass General Brigham Senior Information Security Analyst – Attack Surface Management Function Lead will be responsible for advancing and coordinating the MGB Attack Surface Management capability across vulnerability discovery, penetration testing, attack surface analysis, and attack simulation.
This impactful role will help lead the function into a risk-driven, validation-focused capability that identifies meaningful exposure, prioritizes remediation based on exploitability and business impact, and connects findings to detection engineering, threat hunting, threat intelligence, and broader Cyber Defense priorities.
The ideal candidate is a deeply technical security professional with experience in vulnerability management, offensive security, exposure analysis, penetration testing, or adversary simulation. They should be comfortable translating technical findings into actionable risk narratives, guiding engineers through complex analysis, and helping prioritize work based on business risk, asset criticality, threat relevance, and exploitability.
Expertise for Success
- Vulnerability discovery and vulnerability management
- Attack surface analysis and exposure management
- Penetration testing and exploit validation
- Attack simulation, adversary emulation, or breach and attack simulation
What You'll Do
- Vulnerability Discovery: Support and mature processes to identify vulnerabilities across infrastructure, applications, cloud environments, endpoints, and externally exposed assets. Ensure findings are enriched with asset context, ownership, severity, exploitability, and business impact to support effective prioritization and remediation.
- Attack Surface Analysis: Analyze exposed assets, services, technologies, identities, ownership gaps, and environmental risk to identify meaningful exposure. Translate attack surface data into actionable recommendations for risk reduction.
- Penetration Testing Coordination: Support penetration testing activities, including scoping, methodology, technical validation, reporting, and remediation follow-up. Ensure findings are clearly documented, risk-ranked, and connected to broader Cyber Defense improvement opportunities.
- Attack Simulation: Coordinate and support attack simulation and adversary emulation activities to validate security controls, response processes, and detection coverage. Map activity to MITRE ATT&CK where appropriate and recommend improvements to preventive, detective, and response capabilities.
- Remediation Prioritization: Prioritize remediation activity based on exploitability, asset criticality, business context, exposure, and threat relevance. Partner with technology owners to communicate findings clearly and track remediation through appropriate workflows.
- Detection and Threat Hunting Handoffs: Partner with Security Detections, Threat Intelligence, and Threat Hunting teams to ensure ASM findings inform detection engineering, hunt development, and intelligence-driven security priorities.
- Program Maturity: Develop and maintain repeatable processes, SOPs, playbooks, reporting standards, and quality expectations for ASM workflows. Identify opportunities to improve consistency, scalability, and operational maturity across the function.
- Incident Response Support: Support the incident response team by providing insight into potential attack paths, exploitable vulnerabilities, exposed assets, and adversary techniques that may be relevant during a cyber incident.
- Written Documentation: Create, review, and update documentation related to attack surface management processes, findings, reports, remediation recommendations, playbooks, and security controls.
- Communication: Provide clear and concise written and verbal communication, including technical reporting, long-form documentation, stakeholder updates, and executive presentations. Translate technical detail into language appropriate for the intended audience.
- Industry Knowledge: Maintain awareness of emerging vulnerabilities, attacker techniques, offensive security methods, exposure management practices, and technologies that may impact MGB’s security posture.
MGB Values: Use Mass General Brigham values to guide decisions, actions, and behaviors, including Patients, Affordability, Accountability & Service Commitment, Decisiveness, Innovation & Thoughtful Risk, Diversity & Inclusion, Integrity & Respect, Learning, Continuous Improvement & Personal Growth, and Teamwork & Collaboration.
Other duties as assigned within scope
Qualifications
Education
- Associate’s degree in a related field of study required, or bachelor’s degree in a related field of study required.
- Experience may be reviewed and considered in lieu of a degree.
Credentials
- Relevant professional certifications preferred or required, such as GCIH, GPEN, CISSP, OSCP, or similar credentials.
Experience
- 5–7 years of relevant experience required.
Skills For Success
- Authority in cybersecurity concepts within the role’s domain.
- Proficient understanding of cybersecurity concepts outside of a specific individual domain.
- Expertise with the tools and solutions supported by the team.
- Ability to apply original and innovative thinking to produce new ideas.
- Strong leadership, communication, and project management skills.
- Strong decision-making skills, with the ability to weigh the relative costs and benefits of potential actions and identify the most appropriate path forward.
Additional Job Details (if applicable)
Working Model Required
- Monday–Friday, Eastern business hours.
- Onsite presence required one day per week.
- Flexibility required for additional onsite days for meetings or business needs, as planned and scheduled.
- Remote workdays require a stable, secure, quiet, and compliant workstation using MGB-provided equipment.
Remote Type
Work Location
Scheduled Weekly Hours
Employee Type
Work Shift
Pay Range
Grade
At Mass General Brigham, we believe in recognizing and rewarding the unique value each team member brings to our organization. Our approach to determining base pay is comprehensive, and any offer extended will take into account your skills, relevant experience if applicable, education, certifications and other essential factors. The base pay information provided offers an estimate based on the minimum job qualifications; however, it does not encompass all elements contributing to your total compensation package. In addition to competitive base pay, we offer comprehensive benefits, career advancement opportunities, differentials, premiums and bonuses as applicable and recognition programs designed to celebrate your contributions and support your professional growth. We invite you to apply, and our Talent Acquisition team will provide an overview of your potential compensation and benefits package.
EEO Statement:
Mass General Brigham Competency Framework
At Mass General Brigham, our competency framework defines what effective leadership “looks like” by specifying which behaviors are most critical for successful performance at each job level. The framework is comprised of ten competencies (half People-Focused, half Performance-Focused) and are defined by observable and measurable skills and behaviors that contribute to workplace effectiveness and career success. These competencies are used to evaluate performance, make hiring decisions, identify development needs, mobilize employees across our system, and establish a strong talent pipeline.
Mass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham.
Job Summary
The Opportunity
The Mass General Brigham Senior Information Security Analyst – Attack Surface Management Function Lead will be responsible for advancing and coordinating the MGB Attack Surface Management capability across vulnerability discovery, penetration testing, attack surface analysis, and attack simulation.
This impactful role will help lead the function into a risk-driven, validation-focused capability that identifies meaningful exposure, prioritizes remediation based on exploitability and business impact, and connects findings to detection engineering, threat hunting, threat intelligence, and broader Cyber Defense priorities.
The ideal candidate is a deeply technical security professional with experience in vulnerability management, offensive security, exposure analysis, penetration testing, or adversary simulation. They should be comfortable translating technical findings into actionable risk narratives, guiding engineers through complex analysis, and helping prioritize work based on business risk, asset criticality, threat relevance, and exploitability.
Expertise for Success
- Vulnerability discovery and vulnerability management
- Attack surface analysis and exposure management
- Penetration testing and exploit validation
- Attack simulation, adversary emulation, or breach and attack simulation
What You'll Do
- Vulnerability Discovery: Support and mature processes to identify vulnerabilities across infrastructure, applications, cloud environments, endpoints, and externally exposed assets. Ensure findings are enriched with asset context, ownership, severity, exploitability, and business impact to support effective prioritization and remediation.
- Attack Surface Analysis: Analyze exposed assets, services, technologies, identities, ownership gaps, and environmental risk to identify meaningful exposure. Translate attack surface data into actionable recommendations for risk reduction.
- Penetration Testing Coordination: Support penetration testing activities, including scoping, methodology, technical validation, reporting, and remediation follow-up. Ensure findings are clearly documented, risk-ranked, and connected to broader Cyber Defense improvement opportunities.
- Attack Simulation: Coordinate and support attack simulation and adversary emulation activities to validate security controls, response processes, and detection coverage. Map activity to MITRE ATT&CK where appropriate and recommend improvements to preventive, detective, and response capabilities.
- Remediation Prioritization: Prioritize remediation activity based on exploitability, asset criticality, business context, exposure, and threat relevance. Partner with technology owners to communicate findings clearly and track remediation through appropriate workflows.
- Detection and Threat Hunting Handoffs: Partner with Security Detections, Threat Intelligence, and Threat Hunting teams to ensure ASM findings inform detection engineering, hunt development, and intelligence-driven security priorities.
- Program Maturity: Develop and maintain repeatable processes, SOPs, playbooks, reporting standards, and quality expectations for ASM workflows. Identify opportunities to improve consistency, scalability, and operational maturity across the function.
- Incident Response Support: Support the incident response team by providing insight into potential attack paths, exploitable vulnerabilities, exposed assets, and adversary techniques that may be relevant during a cyber incident.
- Written Documentation: Create, review, and update documentation related to attack surface management processes, findings, reports, remediation recommendations, playbooks, and security controls.
- Communication: Provide clear and concise written and verbal communication, including technical reporting, long-form documentation, stakeholder updates, and executive presentations. Translate technical detail into language appropriate for the intended audience.
- Industry Knowledge: Maintain awareness of emerging vulnerabilities, attacker techniques, offensive security methods, exposure management practices, and technologies that may impact MGB’s security posture.
MGB Values: Use Mass General Brigham values to guide decisions, actions, and behaviors, including Patients, Affordability, Accountability & Service Commitment, Decisiveness, Innovation & Thoughtful Risk, Diversity & Inclusion, Integrity & Respect, Learning, Continuous Improvement & Personal Growth, and Teamwork & Collaboration.
Other duties as assigned within scope
Qualifications
Education
- Associate’s degree in a related field of study required, or bachelor’s degree in a related field of study required.
- Experience may be reviewed and considered in lieu of a degree.
Credentials
- Relevant professional certifications preferred or required, such as GCIH, GPEN, CISSP, OSCP, or similar credentials.
Experience
- 5–7 years of relevant experience required.
Skills For Success
- Authority in cybersecurity concepts within the role’s domain.
- Proficient understanding of cybersecurity concepts outside of a specific individual domain.
- Expertise with the tools and solutions supported by the team.
- Ability to apply original and innovative thinking to produce new ideas.
- Strong leadership, communication, and project management skills.
- Strong decision-making skills, with the ability to weigh the relative costs and benefits of potential actions and identify the most appropriate path forward.
Additional Job Details (if applicable)
Working Model Required
- Monday–Friday, Eastern business hours.
- Onsite presence required one day per week.
- Flexibility required for additional onsite days for meetings or business needs, as planned and scheduled.
- Remote workdays require a stable, secure, quiet, and compliant workstation using MGB-provided equipment.
Remote Type
Work Location
Scheduled Weekly Hours
Employee Type
Work Shift
Pay Range
Grade
At Mass General Brigham, we believe in recognizing and rewarding the unique value each team member brings to our organization. Our approach to determining base pay is comprehensive, and any offer extended will take into account your skills, relevant experience if applicable, education, certifications and other essential factors. The base pay information provided offers an estimate based on the minimum job qualifications; however, it does not encompass all elements contributing to your total compensation package. In addition to competitive base pay, we offer comprehensive benefits, career advancement opportunities, differentials, premiums and bonuses as applicable and recognition programs designed to celebrate your contributions and support your professional growth. We invite you to apply, and our Talent Acquisition team will provide an overview of your potential compensation and benefits package.
EEO Statement:
Mass General Brigham Competency Framework
At Mass General Brigham, our competency framework defines what effective leadership “looks like” by specifying which behaviors are most critical for successful performance at each job level. The framework is comprised of ten competencies (half People-Focused, half Performance-Focused) and are defined by observable and measurable skills and behaviors that contribute to workplace effectiveness and career success. These competencies are used to evaluate performance, make hiring decisions, identify development needs, mobilize employees across our system, and establish a strong talent pipeline.
See All 26 SOC Analyst Jobs in Massachusetts
Find roles in Massachusetts that match your experience and apply in just a few clicks.
Find SOC Analyst JobsSOC Analyst Jobs by City in Massachusetts
Where Massachusetts roles are concentrated, by current openings.
SOC Analyst Job Market in Massachusetts
A snapshot from current Massachusetts openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
What Massachusetts Employers Look For
The qualifications that appear most often in SOC analyst jobs across Massachusetts.
- Security+ or CISSP certification recognized as baseline qualification in most Massachusetts listings
- Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- Proficiency in log analysis, intrusion detection systems, and network traffic monitoring
- Bachelor's degree in cybersecurity, computer science, or a closely related technical discipline
- Familiarity with compliance frameworks such as NIST, HIPAA, or DFARS relevant to Massachusetts regulated industries
- Ability to obtain or maintain a federal security clearance for defense-sector roles in the state
SOC Analyst Jobs in Massachusetts: Frequently Asked Questions
How do you become a soc analyst in Massachusetts?
Massachusetts does not issue a state-specific license for soc analysts, so the path runs through education and industry credentials. Most employers in the state expect a bachelor's degree in cybersecurity or computer science alongside certifications such as CompTIA Security+, CySA+, or a vendor-specific SIEM credential. Candidates targeting defense contractors around Waltham and Bedford should begin the federal security clearance process early, as it is a frequent requirement for those roles.
How much do SOC analysts make in Massachusetts?
SOC analysts in Massachusetts earn a median of about $128,240 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $80,000 for the lowest 10% to over $171,650 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire soc analysts in Massachusetts?
Employers hiring soc analysts in Massachusetts right now include ISO New England, Allied Universal, and Whoop, based on current listings on Migrate Mate as of November 2026. Massachusetts's concentration of defense contractors, major financial institutions, and large academic medical centers means demand is distributed across multiple industries rather than being driven by a single sector.
Which Massachusetts cities have the most soc analyst jobs?
Boston, Cambridge, and Springfield account for the largest share of soc analyst openings in Massachusetts. Boston anchors demand through its dense cluster of financial firms, hospitals, and technology companies, while Waltham and Bedford draw heavily from defense and government contracting employers that operate near the Route 128 corridor and require cleared security personnel.
Are there remote soc analyst jobs in Massachusetts?
Yes, and more than many technical roles, because much of a soc analyst's work involves monitoring dashboards, reviewing alerts, and writing reports from a workstation rather than being physically on-site. About 90% of soc analyst openings tied to Massachusetts are remote or hybrid as of November 2026, reflecting that flexibility. Roles tied to cleared defense work or on-premises infrastructure for healthcare and financial institutions are the most likely to require in-person presence.
How can I get hired as a soc analyst in Massachusetts with little or no experience?
The most realistic entry path is an analyst tier-one or security operations associate role, which large Massachusetts employers such as Fidelity Investments and Mass General Brigham post specifically for candidates without deep prior experience. CompTIA Security+ combined with a hands-on home lab or a community college cybersecurity program strengthens an application considerably. Candidates already working in IT help desk or network support roles at Massachusetts universities or hospital systems are well positioned to move laterally into a junior soc analyst opening.
Where can I find and apply to soc analyst jobs in Massachusetts?
You can find and apply to soc analyst jobs in Massachusetts on Migrate Mate, which lists current openings across Boston, Waltham, and other Massachusetts markets. Search the listings for roles that match your experience level and specialization, then apply directly to the ones that fit.
See All 26 SOC Analyst Jobs in Massachusetts
Find roles in Massachusetts that match your experience and apply in just a few clicks.
Find SOC Analyst Jobs