SOC Analyst Jobs in Pennsylvania
SOC Analyst jobs in Pennsylvania are steadily in demand, with strong hiring concentrated in financial services, healthcare, defense contracting, and state government sectors at every level from entry-level tier-one analyst through senior threat intelligence engineer. Philadelphia, Pittsburgh, and Harrisburg lead the market, anchored by employers like Comcast, the University of Pennsylvania Health System, and Lockheed Martin, all of which maintain long-term security operations in the state. The most sought-after specialties are threat detection and incident response, SIEM platform management, and compliance-driven security monitoring for regulated industries. Find a role that fits below and apply directly.
Find SOC Analyst JobsOverview
Showing 5 of 23+ SOC Analyst jobs
Job Reporting Relationships
Supervised by: Network Services Manager
Supervises: N/A
Basic Qualifications
Education/Training:
Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field preferred, with strong knowledge of Microsoft Windows desktop and server operating systems. Working knowledge of network architecture, including LAN/WAN, firewalls, VPNs, and cloud environments. Familiarity with cybersecurity frameworks (NIST, ISO 27001, CIS, CRI). Relevant certifications preferred (e.g., Security+, CISSP, CISA, CEH) but not required.
Skill(s): Strong written and verbal communication skills; Knowledge of regulatory requirements (GLBA, FFIEC, PCI-DSS, etc.) preferred; Analytical and problem-solving abilities with attention to detail. Understanding of identity and user access management standards. Ability to assess risk and assist in making recommended mitigation strategies. Ability to work collaboratively with vendors and technical peers and management in a complex technology environment. Proven experience evaluating the data privacy risks of third-party generative AI platforms and establishing secure acceptable-use guardrails for corporate users.
Experience: Minimum of one (1) year of experience in information security, IT security operations, or related field preferred.
General Responsibilities
Supports the Bank’s Information Security Program by assisting in the development, implementation, and maintenance of security technology, security controls and processes designed to protect information systems, networks, and data. Ensures compliance with internal policies, regulatory requirements, and industry best practices through monitoring, analysis, reporting, and continuous improvement activities.
Essential Duties
Assist with the Bank’s Information Security functions by performing the following duties:
a. Security Software & Hardware Management: Deploy, configure, maintain, and patch security technologies—including endpoints, firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM platforms, anti-malware/EDR tools, and data encryption solutions.
b. Testing and deploying critical security patches across servers, workstations, and network infrastructure to eliminate vulnerabilities without disrupting bank operations.
c. Reviewing alerts from the SIEM, firewall, and email security gateways (e.g., phishing filters) to distinguish between false positives and real threats.
d. Managing email security, authentication protocols (DKIM, SPF, DMARC) and spam/phishing filters to prevent fraud and business email compromise (BEC).
e. Manage Microsoft 365 Tenant, and email security gateway, data loss prevention and security controls.
f. Before turning on internal AI search tools, you must audit and clean up Active Directory and SharePoint permissions. (If a user has accidental access to HR or financial folders, the AI will surface that data to them).
g. Updating DLP policies with specific rules to detect, alert, and block financial data (SSNs, account numbers, routing numbers) or internal source code from being uploaded to external AI endpoints.
h. Securing the network pipelines and APIs that connect the bank’s databases to the AI models, ensuring all data in transit and at rest is strongly encrypted.
i. Conduct frequent testing of simulated cyber-attacks to look for vulnerabilities in the computer systems and take care of these before an internal or external cyber-attack.
j. Monitoring and configuring system boundaries to prevent attackers from manipulating the AI’s output or extracting sensitive training data via malicious prompts.
k. Reviewing the SOC 2 reports and "AI governance policies" of third-party vendors to determine how they train their models, where the bank's data is stored, and if the data is used to train public models.
l. Audit internal AI tool usage and configure access controls to prevent the exposure of proprietary company data or customer PII.
m. Perform regular vulnerability scans, analyze system logs for anomalies or breach indicators, and participate in threat hunting and incident response activities.
n. Install, maintain, and upgrade software safeguards, including firewalls, data encryption programs, and anti-malware.
o. Investigate cyberattacks, assess the extent of the damage, and coordinate mitigation and recovery efforts.
p. Develop and enforce cybersecurity best practices, develop disaster recovery plans for security systems and services, and ensure compliance with industry’s best practices and privacy laws.
q. Make recommendations to managers and senior executives about information security advancements to best protect the company’s systems.
r. Conducting and documenting quarterly or annual user access reviews to ensure the "principle of least privilege" is maintained.
s. Maintaining standard operating procedures, asset lists and other documentation that support the Information Technology and Security program.
t. Participating in data collection and presentment during risk assessments and regulatory exams.
u. Make recommendations to managers and senior executives about information security advancements to best protect the company’s systems.
Continuously analyze network traffic, activity logs, and system alerts for anomalies, intrusion attempts, and breaches.
a. Execute assigned projects and work with vendors as directed, in oversight and support of the Physical and Information Security infrastructure and solutions.
b. Participate in training as required for the Bank to meet regulatory requirements, recommend and assist in training/retraining of employees in their responsibilities for Information Security Programs.
c. Remain current on Information Technology and Information security trends and assist in Bank compliance with all federal and state laws. Attain certifications as required for the organization to meet vendor guidelines.
d. Complete incident response reporting for security events within the technology infrastructure.
e. Adjust to changing priorities as directed by supervisors or senior management.
Abides by the current laws and organizational policies and procedures designed and implemented to promote an environment which is free of harassment and other forms of illegal discriminatory behavior in the workplace
Cooperates with, participates in, and supports the adherence to all internal policies, procedures, and practices in support of risk management and overall safety and soundness and the Bank's compliance with all regulatory requirements; works to ensure that assigned personnel adhere to the same.
Reports pertinent information to the immediate supervisor as requested, or according to an established schedule; compiles information as necessary or as directed and provides data to appropriate Bank personnel to integrate goals and activities.
Responds to inquiries relating to his/her area of responsibility, or to requests from other Bank personnel, within given time frames and within established policy.
Ancillary Duties
1. Perform tasks which are supportive in nature of the essential functions of the job, but which may be altered or re-designed depending upon individual circumstances.
Job Location
Support Center
1055 Texas Palmyra Highway
Honesdale, PA 18431
Various outside locations
Equipment/Machines
1. Automobile with Valid Driver’s License
2. Smartphone
3. Computer Equipment
Multi-Function Print Devices
Job Reporting Relationships
Supervised by: Network Services Manager
Supervises: N/A
Basic Qualifications
Education/Training:
Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field preferred, with strong knowledge of Microsoft Windows desktop and server operating systems. Working knowledge of network architecture, including LAN/WAN, firewalls, VPNs, and cloud environments. Familiarity with cybersecurity frameworks (NIST, ISO 27001, CIS, CRI). Relevant certifications preferred (e.g., Security+, CISSP, CISA, CEH) but not required.
Skill(s): Strong written and verbal communication skills; Knowledge of regulatory requirements (GLBA, FFIEC, PCI-DSS, etc.) preferred; Analytical and problem-solving abilities with attention to detail. Understanding of identity and user access management standards. Ability to assess risk and assist in making recommended mitigation strategies. Ability to work collaboratively with vendors and technical peers and management in a complex technology environment. Proven experience evaluating the data privacy risks of third-party generative AI platforms and establishing secure acceptable-use guardrails for corporate users.
Experience: Minimum of one (1) year of experience in information security, IT security operations, or related field preferred.
General Responsibilities
Supports the Bank’s Information Security Program by assisting in the development, implementation, and maintenance of security technology, security controls and processes designed to protect information systems, networks, and data. Ensures compliance with internal policies, regulatory requirements, and industry best practices through monitoring, analysis, reporting, and continuous improvement activities.
Essential Duties
Assist with the Bank’s Information Security functions by performing the following duties:
a. Security Software & Hardware Management: Deploy, configure, maintain, and patch security technologies—including endpoints, firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM platforms, anti-malware/EDR tools, and data encryption solutions.
b. Testing and deploying critical security patches across servers, workstations, and network infrastructure to eliminate vulnerabilities without disrupting bank operations.
c. Reviewing alerts from the SIEM, firewall, and email security gateways (e.g., phishing filters) to distinguish between false positives and real threats.
d. Managing email security, authentication protocols (DKIM, SPF, DMARC) and spam/phishing filters to prevent fraud and business email compromise (BEC).
e. Manage Microsoft 365 Tenant, and email security gateway, data loss prevention and security controls.
f. Before turning on internal AI search tools, you must audit and clean up Active Directory and SharePoint permissions. (If a user has accidental access to HR or financial folders, the AI will surface that data to them).
g. Updating DLP policies with specific rules to detect, alert, and block financial data (SSNs, account numbers, routing numbers) or internal source code from being uploaded to external AI endpoints.
h. Securing the network pipelines and APIs that connect the bank’s databases to the AI models, ensuring all data in transit and at rest is strongly encrypted.
i. Conduct frequent testing of simulated cyber-attacks to look for vulnerabilities in the computer systems and take care of these before an internal or external cyber-attack.
j. Monitoring and configuring system boundaries to prevent attackers from manipulating the AI’s output or extracting sensitive training data via malicious prompts.
k. Reviewing the SOC 2 reports and "AI governance policies" of third-party vendors to determine how they train their models, where the bank's data is stored, and if the data is used to train public models.
l. Audit internal AI tool usage and configure access controls to prevent the exposure of proprietary company data or customer PII.
m. Perform regular vulnerability scans, analyze system logs for anomalies or breach indicators, and participate in threat hunting and incident response activities.
n. Install, maintain, and upgrade software safeguards, including firewalls, data encryption programs, and anti-malware.
o. Investigate cyberattacks, assess the extent of the damage, and coordinate mitigation and recovery efforts.
p. Develop and enforce cybersecurity best practices, develop disaster recovery plans for security systems and services, and ensure compliance with industry’s best practices and privacy laws.
q. Make recommendations to managers and senior executives about information security advancements to best protect the company’s systems.
r. Conducting and documenting quarterly or annual user access reviews to ensure the "principle of least privilege" is maintained.
s. Maintaining standard operating procedures, asset lists and other documentation that support the Information Technology and Security program.
t. Participating in data collection and presentment during risk assessments and regulatory exams.
u. Make recommendations to managers and senior executives about information security advancements to best protect the company’s systems.
Continuously analyze network traffic, activity logs, and system alerts for anomalies, intrusion attempts, and breaches.
a. Execute assigned projects and work with vendors as directed, in oversight and support of the Physical and Information Security infrastructure and solutions.
b. Participate in training as required for the Bank to meet regulatory requirements, recommend and assist in training/retraining of employees in their responsibilities for Information Security Programs.
c. Remain current on Information Technology and Information security trends and assist in Bank compliance with all federal and state laws. Attain certifications as required for the organization to meet vendor guidelines.
d. Complete incident response reporting for security events within the technology infrastructure.
e. Adjust to changing priorities as directed by supervisors or senior management.
Abides by the current laws and organizational policies and procedures designed and implemented to promote an environment which is free of harassment and other forms of illegal discriminatory behavior in the workplace
Cooperates with, participates in, and supports the adherence to all internal policies, procedures, and practices in support of risk management and overall safety and soundness and the Bank's compliance with all regulatory requirements; works to ensure that assigned personnel adhere to the same.
Reports pertinent information to the immediate supervisor as requested, or according to an established schedule; compiles information as necessary or as directed and provides data to appropriate Bank personnel to integrate goals and activities.
Responds to inquiries relating to his/her area of responsibility, or to requests from other Bank personnel, within given time frames and within established policy.
Ancillary Duties
1. Perform tasks which are supportive in nature of the essential functions of the job, but which may be altered or re-designed depending upon individual circumstances.
Job Location
Support Center
1055 Texas Palmyra Highway
Honesdale, PA 18431
Various outside locations
Equipment/Machines
1. Automobile with Valid Driver’s License
2. Smartphone
3. Computer Equipment
Multi-Function Print Devices
See All 23 SOC Analyst Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find SOC Analyst JobsSOC Analyst Jobs by City in Pennsylvania
Where Pennsylvania roles are concentrated, by current openings.
SOC Analyst Job Market in Pennsylvania
A snapshot from current Pennsylvania openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
- Healthcare & Medical Services
- Education
- Science & Research
- Government & Public Sector
What Pennsylvania Employers Look For
The qualifications that appear most often in SOC analyst jobs across Pennsylvania.
- Bachelor's degree in cybersecurity, information technology, or a closely related field
- Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, or IBM QRadar
- CompTIA Security+ or equivalent industry certification recognized by Pennsylvania employers
- Familiarity with incident response procedures, log analysis, and threat triage workflows
- Understanding of NIST, HIPAA, or PCI-DSS compliance frameworks common in Pennsylvania industries
- Ability to work rotating shifts including nights or weekends in 24/7 SOC environments
SOC Analyst Jobs in Pennsylvania: Frequently Asked Questions
How do you become a soc analyst in Pennsylvania?
Pennsylvania does not require a state-issued license to work as a soc analyst, so the path runs through education and industry certification. Most employers expect at least a bachelor's degree in cybersecurity, computer science, or information technology, paired with a recognized certification such as CompTIA Security+, CompTIA CySA+, or CEH. Gaining hands-on experience through labs, internships, or help-desk roles in Pennsylvania's healthcare or financial services sectors is the most practical way to build a competitive profile.
How much do SOC analysts make in Pennsylvania?
SOC analysts in Pennsylvania earn a median of about $98,550 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $63,910 for the lowest 10% to over $133,670 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire soc analysts in Pennsylvania?
Employers hiring soc analysts in Pennsylvania right now include BNY, PNC Financial Services, and HYDAC, based on current listings on Migrate Mate as of September 2026. Pennsylvania's mix of large health systems, defense contractors, and financial institutions means consistent, year-round demand rather than seasonal spikes.
Which Pennsylvania cities have the most soc analyst jobs?
Pittsburgh, Philadelphia, and Radnor have the most soc analyst openings in Pennsylvania right now. Philadelphia dominates due to its concentration of financial institutions, major health systems, and corporate headquarters, while Pittsburgh's growing technology and healthcare sectors drive strong demand there, and Harrisburg attracts consistent openings from state government agencies and defense-adjacent contractors based in the capital region.
Are there remote soc analyst jobs in Pennsylvania?
Yes, and more than most technical roles, since much of the work involves monitoring dashboards and analyzing alerts that are accessible from anywhere with a secure connection. About 50% of soc analyst openings tied to Pennsylvania are remote or hybrid as of September 2026, reflecting the role's desk-based, tool-driven nature. Threat monitoring and SIEM analysis are the functions most commonly performed remotely, while forensics and on-site incident response typically require physical presence.
How can I get hired as a soc analyst in Pennsylvania with little or no experience?
The most realistic entry path is a help-desk or IT support role at a Pennsylvania hospital system, university, or financial services firm, where you build practical exposure to ticketing, escalation, and basic network troubleshooting before moving into a tier-one SOC position. Large Pennsylvania employers such as Penn Medicine and UPMC run associate and rotational IT programs that place candidates into security-adjacent roles. Earning CompTIA Security+ before applying signals readiness even without direct SOC experience, and personal home-lab projects documenting SIEM setup or log analysis add concrete evidence to a resume.
Where can I find and apply to soc analyst jobs in Pennsylvania?
You can find and apply to soc analyst jobs in Pennsylvania on Migrate Mate, which lists current Pennsylvania openings updated regularly. Search the listings for roles that match your experience level and preferred location, then apply directly to the ones that fit.
See All 23 SOC Analyst Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find SOC Analyst Jobs